This cybersecurity investigation reveals a complex network of 17 interconnected entities centered around financial services companies with significant consumer complaint histories. The campaign involves three phone numbers (941-244-5361, 941-244-5360, and 888-227-0402), six domains including fraudpractice.com and atmcash.com, and five companies spanning mortgage, debt collection, student loan, and credit reporting industries. The most concerning entity is Credit Corp Solutions Inc., which has ge...
941-244-5361
Last reported Apr 21, 2026
- 2 community reports from users
Campaign Intelligence
This cluster centers on 2451 connected domains tagged as GuLoader, NorthKorea, trojan. The domains include cdn.discordapp.com, 91.92.241.152, 91.92.240.222, 158.94.208.174, 178.16.52.44, 158.94.211.102, 158.94.210.93, 158.94.208.52, i.postimg.cc, s3.us-east-2.amazonaws.com, storage.googleapis.com, 178.16.52.18, 158.94.211.101, 158.94.211.100, local-host.life, dropmefiles.com, limewire.com, 62.60.226.159, id8965.com, valfanto.com and 2431 more. 633 of these domains have been flagged by threat int...
This cluster centers on 1486 connected domains tagged as AgentTesla, None, js. The domains include i.postimg.cc, cdn.discordapp.com, s3.us-east-2.amazonaws.com, pastes.io, dl.dropboxusercontent.com, ltcexchange.bitparking.com, bitcoin.sipa.be, litecoinpool.org, cryptocoincharts.com, sigaintevyh2rzvw.onion, toremail.net, lelantos.org, www.sigaint.org, epjhlyfgxenf2q4o.onion~~, inocncymyac2mufx.onion, torbox3uiot6wchz.onion, 344c6kbnjnljjzlz.onion, mailtor.net, bscscan.com, securitized.io and 1466...
This cluster centers on 2957 connected domains tagged as GuLoader, NorthKorea, censys. The domains include salelegalsteroids.com, 192.210.186.208, gharnt.com, cloflart.com, id3702579photo-image-docs.com, www.almacensantangel.com, 64.95.12.162, blue-oceans.net, sixmexicos.com, baritonclick.online, 185.252.24.15, un1rw11q4u.com, ameyiando.com, niril.sbs, bursaelektriktamir.com, blankeyeo.com, umxtxhub.za.com, sunchernical.com, 18.194.67.137, servecdn.my and 2937 more. 606 of these domains have bee...
This cluster centers on 2559 connected domains tagged as GuLoader, NorthKorea, trojan. The domains include 83.224.148.34, 14.236.247.68, 120.157.72.59, 95.127.248.192, 116.110.179.199, 116.101.73.68, 95.127.250.241, 152.173.199.182, 91.80.129.100, 59.88.45.188, 117.216.5.20, 182.60.11.164, 41.146.14.165, 120.157.46.38, 59.182.90.199, 113.168.249.76, 78.132.114.25, 171.241.208.124, 120.157.229.220, 14.236.84.25 and 2539 more. 640 of these domains have been flagged by threat intelligence feeds inc...
Details
Linked Company Activity
Connected Entities
Linked Companies
Direct, Inc
reported togethercompanyFlagstar Bank, N.A.
campaign co-membercompanyFirst Credit Services Inc.
campaign co-membercompanyPENTAGON FEDERAL CREDIT UNION
campaign co-membercompanyFIFTH THIRD FINANCIAL CORPORATION
campaign co-membercompanyCredit Services Corporation, LLC
campaign co-membercompanyIntegrity Group Inc
campaign co-membercompanyThe Bureaus, Inc.
campaign co-membercompanyEVERBANK, NATIONAL ASSOCIATION
campaign co-membercompanyTime Investment Corporation
campaign co-membercompanyCheckr, Inc
campaign co-membercompanyMOUNTAIN AMERICA FEDERAL CREDIT UNION
campaign co-memberRelated Phone Numbers
8882270402
reported togetherphone9412445360
reported togetherphone8553572202
campaign co-memberphone3186669555
campaign co-memberphone8667715844
campaign co-memberphone8339086865
campaign co-memberphone8009220204
campaign co-memberphone4097617631
campaign co-memberphone6789998212
campaign co-memberphone6512042449
campaign co-memberphone5187704680
campaign co-memberphone8887291403
campaign co-memberphone8889194623
campaign co-memberphone9805107108
campaign co-memberphone7712473445
campaign co-memberphone5858247925
campaign co-memberphone8009993355
campaign co-memberphone8007715361
campaign co-memberphone8009033637
campaign co-memberphone8884260179
campaign co-memberphone2025582508
campaign co-memberphone9297499563
campaign co-memberphone3025417253
campaign co-memberphone8887910954
campaign co-memberRelated Domains
fraudpractice.com
reported togetherdomainwww.fraudpractice.com
reported togetherdomain130.12.180.43
campaign co-memberdomainimplementing-theft-metal-justin.trycloudflare.com
campaign co-memberdomainstaying-heavily-meaning-blowing.trycloudflare.com
campaign co-memberdomaincreations-venture-traditional-stainless.trycloudflare.com
campaign co-memberdomain103.125.219.204
campaign co-memberdomain206.123.145.26
campaign co-memberdomainarilprivate.storexyz.web.id
campaign co-memberdomain14.236.182.73
campaign co-memberdomain83.224.162.132
campaign co-memberdomain123.31.81.229
campaign co-memberRelated Emails
training@fraudpractice.com
reported togetheremailquestions@fraudpractice.com
reported togetheremailadvertising@fraudpractice.com
reported togetheremaildiana@ierek.com
campaign co-memberemailcfjtfl@verxl.com
campaign co-memberemailcbx-df@ceszx.com
campaign co-memberemailj.thompson8822@ymail.com
campaign co-memberemailbb.adige@libero.it
campaign co-memberemailhr@teknfix.com
campaign co-memberemailpangmyiuhk@yahoo.co.jp
campaign co-memberemailmarydavis09@zoho.com
campaign co-memberemailidentity@varomoney.com
campaign co-memberCommunity Reports
The Fraud Practice: Contacts **MAILING ADDRESS** The Fraud Practice LLC. 5255 Office Park Blvd, Suite 107 Bradenton, FL 34203 Freephone: +1 888 227 0402 Telephone: +1 941 244 5361 FAX: +1 941 244 5360FAX: E-mail: questions@fraudpractice.com Feel free to call **[The Fraud Practice](http://www.fraudpractice.com/)** at anytime and we will return your call generally within 24 hours. If you want to reach us live try **[contacting us](http://www.fraudpractice.com/contact.html)** between 9am and 5pm eastern standard time. Trying to reach us from outside the USA?. Be sure to use our direct line +1 941.244.5361 as our freephone is only available from within the USA and Canada. Customer Service: E-mail: questions@fraudpractice.com Target marketing office: E-mail: advertising@fraudpractice.com Training center: E-mail: training@fraudpractice.com **OUR WEB POLICIES** Terms of Use: Terms of use for content on our website, Fraud Library and our private content provided to merchants using our Chargeback Monitoring Services. Privacy Policy: We understand privacy is a primary concern, learn how we use information you provide to us while interacting with our website. NOTICE: Third Party References As you navigate our website you will find occasional references to third party content and URL's in editorial content within our site. The use of these references does not constitute an endorsement of these sources and we cannot certify that these sites are free from malware.
The Fraud Practice: Contacts **MAILING ADDRESS** The Fraud Practice LLC. 5255 Office Park Blvd, Suite 107 Bradenton, FL 34203 Freephone: +1 888 227 0402 Telephone: +1 941 244 5361 FAX: +1 941 244 5360FAX: E-mail: questions@fraudpractice.com Feel free to call **[The Fraud Practice](http://www.fraudpractice.com/)** at anytime and we will return your call generally within 24 hours. If you want to reach us live try **[contacting us](http://www.fraudpractice.com/contact.html)** between 9am and 5pm eastern standard time. Trying to reach us from outside the USA?. Be sure to use our direct line +1 941.244.5361 as our freephone is only available from within the USA and Canada. Customer Service: E-mail: questions@fraudpractice.com Target marketing office: E-mail: advertising@fraudpractice.com Training center: E-mail: training@fraudpractice.com **OUR WEB POLICIES** Terms of Use: Terms of use for content on our website, Fraud Library and our private content provided to merchants using our Chargeback Monitoring Services. Privacy Policy: We understand privacy is a primary concern, learn how we use information you provide to us while interacting with our website. NOTICE: Third Party References As you navigate our website you will find occasional references to third party content and URL's in editorial content within our site. The use of these references does not constitute an endorsement of these sources and we cannot certify that these sites are free from malware.
Share Your Experience
What's Your Exposure?
Know your risk exposure to this message with a Thorough Analysis. It returns a detailed report covering the complaint history, your data breach exposure, related scam entities, and risk signals tied to this email message. Check the box and enter your email address now.