This cluster centers on 1486 connected domains tagged as AgentTesla, None, js. The domains include i.postimg.cc, cdn.discordapp.com, s3.us-east-2.amazonaws.com, pastes.io, dl.dropboxusercontent.com, ltcexchange.bitparking.com, bitcoin.sipa.be, litecoinpool.org, cryptocoincharts.com, sigaintevyh2rzvw.onion, toremail.net, lelantos.org, www.sigaint.org, epjhlyfgxenf2q4o.onion~~, inocncymyac2mufx.onion, torbox3uiot6wchz.onion, 344c6kbnjnljjzlz.onion, mailtor.net, bscscan.com, securitized.io and 1466...
888-844-9156
Last reported May 4, 2026
- 17 community reports from users
Campaign Intelligence
This cluster centers on 2559 connected domains tagged as GuLoader, NorthKorea, trojan. The domains include 83.224.148.34, 14.236.247.68, 120.157.72.59, 95.127.248.192, 116.110.179.199, 116.101.73.68, 95.127.250.241, 152.173.199.182, 91.80.129.100, 59.88.45.188, 117.216.5.20, 182.60.11.164, 41.146.14.165, 120.157.46.38, 59.182.90.199, 113.168.249.76, 78.132.114.25, 171.241.208.124, 120.157.229.220, 14.236.84.25 and 2539 more. 640 of these domains have been flagged by threat intelligence feeds inc...
This scam campaign involves a coordinated debt collection scheme utilizing multiple phone numbers connected to Collections Inc, a debt collection entity with 21 CFPB complaints. The operation centers around five phone numbers: 8888449156, 8579907429, 2185956784, 9152392442, and 2722001501, with 8888449156 serving as the primary contact point that connects to all other numbers in the network. Despite the coordinated nature of this campaign, none of these numbers have generated FTC complaints, sug...
Details
Linked Company Activity
Connected Entities
Linked Companies
PENTAGON FEDERAL CREDIT UNION
campaign co-membercompanyFIFTH THIRD FINANCIAL CORPORATION
campaign co-membercompanyCredit Services Corporation, LLC
campaign co-membercompanyIntegrity Group Inc
campaign co-membercompanyDirect, Inc
campaign co-membercompanyThe Bureaus, Inc.
campaign co-membercompanyEVERBANK, NATIONAL ASSOCIATION
campaign co-membercompanyTime Investment Corporation
campaign co-membercompanyCheckr, Inc
campaign co-membercompanyMOUNTAIN AMERICA FEDERAL CREDIT UNION
campaign co-membercompanyFuture Financial Inc.
campaign co-membercompanyReady Capital Corporation
campaign co-memberRelated Phone Numbers
8553572202
campaign co-memberphone8667715844
campaign co-memberphone8339086865
campaign co-memberphone8009220204
campaign co-memberphone4097617631
campaign co-memberphone6789998212
campaign co-memberphone6512042449
campaign co-memberphone5187704680
campaign co-memberphone8887291403
campaign co-memberphone8889194623
campaign co-memberphone9805107108
campaign co-memberphone7712473445
campaign co-memberphone5858247925
campaign co-memberphone8009993355
campaign co-memberphone8007715361
campaign co-memberphone8009033637
campaign co-memberphone2025582508
campaign co-memberphone9297499563
campaign co-memberphone8887910954
campaign co-memberphone8334471291
campaign co-memberphone7656119812
campaign co-memberphone8669591188
campaign co-memberphone8442446363
campaign co-memberphone3473635189
campaign co-memberRelated Domains
130.12.180.43
campaign co-memberdomainimplementing-theft-metal-justin.trycloudflare.com
campaign co-memberdomainstaying-heavily-meaning-blowing.trycloudflare.com
campaign co-memberdomaincreations-venture-traditional-stainless.trycloudflare.com
campaign co-memberdomain103.125.219.204
campaign co-memberdomain206.123.145.26
campaign co-memberdomainarilprivate.storexyz.web.id
campaign co-memberdomain14.236.182.73
campaign co-memberdomain83.224.162.132
campaign co-memberdomain123.31.81.229
campaign co-memberdomain120.157.56.105
campaign co-memberdomain113.176.132.141
campaign co-memberRelated Emails
cfjtfl@verxl.com
campaign co-memberemaildiana@ierek.com
campaign co-memberemailhr@teknfix.com
campaign co-memberemailcbx-df@ceszx.com
campaign co-memberemailj.thompson8822@ymail.com
campaign co-memberemailbb.adige@libero.it
campaign co-memberemailpangmyiuhk@yahoo.co.jp
campaign co-memberemailmarydavis09@zoho.com
campaign co-memberemailxxxxxxxxxxxxxxxxxxxxxxxx@vmh5.grupoaldama.com.mx
campaign co-memberemaila4084163@trbvm.com
campaign co-memberemaillegalnotice@facebookmail.com
campaign co-memberemailleads@myhome.ie
campaign co-memberCommunity Reports
With documents there, my name is Sophia Marshall with document services. This call is intended for (person’s name). Or a reference number. (File#). This is a formal notice regarding the noncompliance notice that is being filed against you. If you have not received the notice properly by mail, please call the litigation's office immediately to request a copy to be sent out certified. Please note this complaint can move forward legally without your consent within one to 2 business days. Please feel free to contact the office with any further questions at. 888-844-9156. Please consider yourself notified. Thank you. [BBB Scam Type: Identity Theft] [Business: Document Services] [Location: FL, USA- 34787]
My name is Sophia Marshall with document services. this call is intended for ________. or reference number 640233, This is a formal notice regarding the noncompliance notice that is being filed against you. If you have not received the notice properly by mail, please call the litigations office immediately to request a copy to be sent out certified. Please note this complaint can move forward legally without your consent within one to two business days. Please feel free to contact the office with any further questions at 888-844-9156. Please consider yourself notified. Thank you. [BBB Scam Type: Debt Collections] [Business: Document Services / Process Server Imposter Debt Collections Vishing and Identity Theft Scam] [Location: TX, USA- 79409]
Called my phone, my husbands, and my father in law’s repeatedly over several days at the exact same times. Claiming to be from Document Services and leaving voicemails reading: “ My name is Sophia Marshall with document services. This call is intended for _________. For a reference number, ______. This is a formal notice regarding the noncompliance notice that is being filed against you. If you have not received the notice properly by mail, please call the litigation's office immediately to request a copy to be sent out certified. Please note this complaint can move forward legally without your consent within one to 2 business days, please feel free to contact the office with any further questions at. 888-844-9156. Please consider yourself notified. Thank you. [BBB Scam Type: Phishing] [Business: Document Services] [Location: MI, USA- 48860]
Received a voicemail on my number for a relative. I called both the number they called from 564-203-4364 and the number listed 888-844-9156, both go to Document Services answered by a Mr Vargas. No business name provided. My name is Sophia Marshall with document services. This call is intended for ____________. For a reference number 642508. This is a formal notice regarding the noncompliance notice that is being filed against you. If you have not received the notice properly by mail, please call the litigation office immediately to request a copy to be sent out certified. Please note this complaint can move forward legally without your consent within one to 2 business days. Please feel free to contact the office with any further questions at. 888-844-9156. Please consider yourself notified. Thank you. [BBB Scam Type: Phishing] [Business: Document Services] [Location: CA, USA- 95677]
Message on my voicemail "My name is Sophia Marshall with document services. This call is intended for Gerald *****. For a reference number. 101-3140. This is a formal notice regarding the noncompliance notice that is being filed against you. If you have not received the notice properly by mail, please call the litigation's office immediately to request a copy to be sent out Certified. Please note this this complaint can move forward legally without your consent within one to 2 business days. Please feel free to contact the office with any further questions at 888-844-9156 Please consider yourself notified. Thank you" from the Number 540-276-7115 when I called they gave me my Name and date of Birth once I said that it was me they gave me my SSN and 4 addresses and asked if I had ever lived there I said 2 are correct 2 are not and I asked for them not to say my SSN over the phone I don't care if it was correct or not I would not like that information shared with anyone. They advised me that someone would be out to my home to serve the papers. I have this voicemail saved and can email it if you are needing it [BBB Scam Type: Phishing] [Business: Document Services] [Location: VA, USA- 24073]
“My name is Sophia Marshall with document services. This call is intended for Rafael Trejo. For a reference number 642283. This is a formal notice regarding the noncompliance notice that is being filed against you. If you have not received the notice properly by mail, please call the litigation's office immediately to request a copy to be sent out certified. Please note this complaint can move forward legally without your consent within one to 2 business days. Please feel free to contact the office with any further questions at. 888-844-9156. Please consider yourself notified. Thank you.” I received the same message. When I called the 888 number they aren’t able to look me up by name, dob, telephone number, only request that ref number which I refused to give. I gave them everything else and “I wasn’t in the system” but they insisted they could help me once I gave them that ref number. This is a total scam!! They want to serve me? I haven’t moved in over 7 years. I work for the state and I know I can pull DPS info to serve someone. They could’ve done the same and saw where I lived. Instead they are claiming I owe money and blah blah but couldn’t tell me anything until that red number was given. Again I work with cases and you clearly have ALL that info PLUS more on the defendant. [BBB Scam Type: Debt Collections] [Business: Documented services] [Location: TX, USA- 78701]
They called for my Sister and said the following: And the personal phone # "****** ********* called from was (303)274-3666 My name is Sophi* ******** with document services. this call is intended for ________. or reference number ******** This is a formal notice regarding the noncompliance notice that is being filed against you. If you have not received the notice properly by mail, please call the litigations office immediately to request a copy to be sent out certified. Please note this complaint can move forward legally without your consent within one to two business days. Please feel free to contact the office with any further questions at 888-844-9156. Please consider yourself notified. Thank you. [BBB Scam Type: Phishing] [Business: Document Solutions] [Location: OK, USA- 74801]
"referenec number 100-8348. This is a formal notice filed against you by the city of FT Worth. call litigation office within 2 days at 888.844.9156. Please consider yourself served." [BBB Scam Type: Tax Collection] [Business: US TEXAS litagation office Date Repo] [Location: TX, USA- 76112]
Received a phone call and voice mail on February 10th, 2026 at 12:00pm. Caller called from (502)215-3212 and left a voicemail saying "730. This is a formal notice regarding the noncompliance notice that is being filed against you. If you have not received the notice properly by mail, please call the litigation's office immediately to request a copy to be sent out certified. Please note this complaint can move forward legally without your consent within one to 2 business days, please feel free to contact the office with any further questions at. 888-844-9156. Please consider yourself notified. Thank you." [BBB Scam Type: Debt Collections] [Business: None] [Location: KY, USA- 40217]
Received a voicemail on my number for a relative. I called both the number they called from 854-201-9869 and the number listed 888-844-9156, both go to Document Services answered by a Mr Vargas. No business name provided. My name is Sophia Marshall with document services. This call is intended for ____________. For a reference number 1022111. This is a formal notice regarding the noncompliance notice that is being filed against you. If you have not received the notice properly by mail, please call the litigation office immediately to request a copy to be sent out certified. Please note this complaint can move forward legally without your consent within one to 2 business days. Please feel free to contact the office with any further questions at. 888-844-9156. Please consider yourself notified. Thank you. [BBB Scam Type: Phishing] [Business: Unknown] [Location: MO, USA- 63141]
Share Your Experience
What's Your Exposure?
Know your risk exposure to this message with a Thorough Analysis. It returns a detailed report covering the complaint history, your data breach exposure, related scam entities, and risk signals tied to this email message. Check the box and enter your email address now.