This cluster centers on 2957 connected domains tagged as GuLoader, NorthKorea, censys. The domains include salelegalsteroids.com, 192.210.186.208, gharnt.com, cloflart.com, id3702579photo-image-docs.com, www.almacensantangel.com, 64.95.12.162, blue-oceans.net, sixmexicos.com, baritonclick.online, 185.252.24.15, un1rw11q4u.com, ameyiando.com, niril.sbs, bursaelektriktamir.com, blankeyeo.com, umxtxhub.za.com, sunchernical.com, 18.194.67.137, servecdn.my and 2937 more. 606 of these domains have bee...
888-413-9469
Last reported Mar 20, 2026
- 6 FTC complaints filed against this number
- 1 community report from users
- Most reports: Calls pretending to be government, businesses, or family and friends
Campaign Intelligence
Details
Linked Company Activity
Connected Entities
Linked Companies
PENTAGON FEDERAL CREDIT UNION
campaign co-membercompanyCredit Services Corporation, LLC
campaign co-membercompanyIntegrity Group Inc
campaign co-membercompanyDirect, Inc
campaign co-membercompanyThe Bureaus, Inc.
campaign co-membercompanyEVERBANK, NATIONAL ASSOCIATION
campaign co-membercompanyCheckr, Inc
campaign co-membercompanyMOUNTAIN AMERICA FEDERAL CREDIT UNION
campaign co-membercompanyFuture Financial Inc.
campaign co-membercompanyReady Capital Corporation
campaign co-membercompanyREGIONS FINANCIAL CORPORATION
campaign co-membercompanyThe Collection Agency LLC
campaign co-memberRelated Phone Numbers
8553572202
campaign co-memberphone3186669555
campaign co-memberphone8009220204
campaign co-memberphone6789998212
campaign co-memberphone8889194623
campaign co-memberphone8009993355
campaign co-memberphone8007715361
campaign co-memberphone8009033637
campaign co-memberphone8884260179
campaign co-memberphone2025582508
campaign co-memberphone3025417253
campaign co-memberphone8887910954
campaign co-memberphone7656119812
campaign co-memberphone3473635189
campaign co-memberphone6095276573
campaign co-memberphone9096341137
campaign co-memberphone4122148209
campaign co-memberphone8446863816
campaign co-memberphone2013652729
campaign co-memberphone4077347620
campaign co-memberphone8004727563
campaign co-memberphone6468099698
campaign co-memberphone2028008504
campaign co-memberphone8446312193
campaign co-memberRelated Domains
130.12.180.43
campaign co-memberdomainimplementing-theft-metal-justin.trycloudflare.com
campaign co-memberdomainstaying-heavily-meaning-blowing.trycloudflare.com
campaign co-memberdomaincreations-venture-traditional-stainless.trycloudflare.com
campaign co-memberdomain103.125.219.204
campaign co-memberdomain206.123.145.26
campaign co-memberdomainarilprivate.storexyz.web.id
campaign co-memberdomain14.236.182.73
campaign co-memberdomain83.224.162.132
campaign co-memberdomain123.31.81.229
campaign co-memberdomain120.157.56.105
campaign co-memberdomain113.176.132.141
campaign co-memberRelated Emails
diana@ierek.com
campaign co-memberemailcfjtfl@verxl.com
campaign co-memberemailcbx-df@ceszx.com
campaign co-memberemailj.thompson8822@ymail.com
campaign co-memberemailbb.adige@libero.it
campaign co-memberemailhr@teknfix.com
campaign co-memberemailpangmyiuhk@yahoo.co.jp
campaign co-memberemailmarydavis09@zoho.com
campaign co-memberemailidentity@varomoney.com
campaign co-memberemailservicename@nickname.tld
campaign co-memberemaila4084163@trbvm.com
campaign co-memberemaillegalnotice@facebookmail.com
campaign co-memberCommunity Reports
I received the first message from them on February 5th, 2026 under the number 47173. Their initial text: “Payment options on your CAPITAL COMMUNITY BANK CC FLOW LINE OF CREDIT account are available all day, every day, at https://portal.halstedfinancial.com/s/UP0hh You may also call us at 888-228-1916 to learn more. This text is from Halsted Financial, a debt collector. Reply stop to opt-out” Four days later I received the same text but with a different url ending and phone number. February 10th, 2026 I received- “Fantastic update! You can get 50% off your CAPITAL COMMUNITY BANK CC FLOW LINE OF CREDIT account. We'll set you up with 16 biweekly payments of $25.39 toward your account. For details, visit https://portal.halstedfinancial.com/s/1TwYa or call 888-413-9469. This text is from Halsted Financial, a debt collector. Reply stop to opt-out” On February 13th I received a copy of the previous message, this time with the same phone number but different url ending. I received three more texts similar to the ones above and was sent this one on March 4th: “Act Fast! Hi ASHLEY, tax season discounts apply to your $1,015.66 balance with CAPITAL COMMUNITY BANK CC FLOW LINE OF CREDIT. Save 60% using your refund. Call 888-364-1239, reply to this text, or click here today: https://portal.halstedfinancial.com/s/kMsU6 This text is from Halsted Financial, a debt collector. Reply stop to opt-out” My name is not Ashley nor do I have debt. Nevertheless I looked into the debt collector and bank mentioned. The scammer seems to be impersonating Halsted Financial Services, LLC (accredited and based in Skokie, IL) and Capital Community Bank (accredited and based in Utah). I’ve received three more texts from 47173 since March 4th. On February 12th from 39484 I was messaged- “Take control of your CAPITAL COMMUNITY BANK CC FLOW LINE OF CREDIT account. Visit https://portal.halstedfinancial.com/s/1hHJd or call 8 [BBB Scam Type: Debt Collections] [Business: Halsted Financial] [Location: TX
Share Your Experience
What's Your Exposure?
Know your risk exposure to this message with a Thorough Analysis. It returns a detailed report covering the complaint history, your data breach exposure, related scam entities, and risk signals tied to this email message. Check the box and enter your email address now.