888-707-0540

This cluster centers on 2451 connected domains tagged as GuLoader, NorthKorea, trojan. The domains include cdn.discordapp.com, 91.92.241.152, 91.92.240.222, 158.94.208.174, 178.16.52.44, 158.94.211.102, 158.94.210.93, 158.94.208.52, i.postimg.cc, s3.us-east-2.amazonaws.com, storage.googleapis.com, 178.16.52.18, 158.94.211.101, 158.94.211.100, local-host.life, dropmefiles.com, limewire.com, 62.60.226.159, id8965.com, valfanto.com and 2431 more. 633 of these domains have been flagged by threat int...

This cluster centers on 1486 connected domains tagged as AgentTesla, None, js. The domains include i.postimg.cc, cdn.discordapp.com, s3.us-east-2.amazonaws.com, pastes.io, dl.dropboxusercontent.com, ltcexchange.bitparking.com, bitcoin.sipa.be, litecoinpool.org, cryptocoincharts.com, sigaintevyh2rzvw.onion, toremail.net, lelantos.org, www.sigaint.org, epjhlyfgxenf2q4o.onion~~, inocncymyac2mufx.onion, torbox3uiot6wchz.onion, 344c6kbnjnljjzlz.onion, mailtor.net, bscscan.com, securitized.io and 1466...

This cluster centers on 2957 connected domains tagged as GuLoader, NorthKorea, censys. The domains include salelegalsteroids.com, 192.210.186.208, gharnt.com, cloflart.com, id3702579photo-image-docs.com, www.almacensantangel.com, 64.95.12.162, blue-oceans.net, sixmexicos.com, baritonclick.online, 185.252.24.15, un1rw11q4u.com, ameyiando.com, niril.sbs, bursaelektriktamir.com, blankeyeo.com, umxtxhub.za.com, sunchernical.com, 18.194.67.137, servecdn.my and 2937 more. 606 of these domains have bee...

This cluster centers on 2559 connected domains tagged as GuLoader, NorthKorea, trojan. The domains include 83.224.148.34, 14.236.247.68, 120.157.72.59, 95.127.248.192, 116.110.179.199, 116.101.73.68, 95.127.250.241, 152.173.199.182, 91.80.129.100, 59.88.45.188, 117.216.5.20, 182.60.11.164, 41.146.14.165, 120.157.46.38, 59.182.90.199, 113.168.249.76, 78.132.114.25, 171.241.208.124, 120.157.229.220, 14.236.84.25 and 2539 more. 640 of these domains have been flagged by threat intelligence feeds inc...

This scam campaign centers around a sophisticated debt collection scheme involving multiple coordinated phone numbers, fake company identities, and fraudulent communications targeting consumers across several states. The operation utilizes at least seven phone numbers operating as part of the same campaign, including 8887070540, 8885025824, 8008941480, 8557762375, 8886120489, 8332003179, and 7019409276. These numbers are connected through shared campaign infrastructure, with confidence levels ra...

**Debt Collection and Payday Loan Scam Campaign Report** This cybersecurity investigation has identified a coordinated scam campaign operating through a network of 6 connected phone numbers and 2 companies involved in high-risk financial services. The campaign centers around Credit Corp Solutions Inc., a debt collection company with 2,734 CFPB complaints, and The Money Company, a payday loan operation with 2 CFPB complaints. The phone numbers involved are 323-237-8012, 855-776-2375, 888-707-054...

**Debt Collection Scam Campaign Analysis: Account Services Inc. and Associated Phone Numbers** Our investigation has identified a coordinated scam campaign involving Account Services Inc. and three associated phone numbers: 8887070540, 8008941480, and 8889279710. Account Services Inc., operating in the debt collection industry, has generated 8 complaints with the Consumer Financial Protection Bureau (CFPB). Analysis reveals strong connections between this company and all three phone numbers, wi...

This scam campaign involves a coordinated network of five phone numbers operating in conjunction with two companies to target consumers with fraudulent debt collection and payment decline schemes. The campaign centers around phone number 8885025824, which connects to all other numbers in the network including 8883380640, 8887070540, 6148052524, and 8776951552 through same-campaign relationships with 0.70 confidence scores. These numbers are linked to United Group Inc., which has accumulated 75 C...