This cluster centers on 3287 connected domains tagged as HijackLoader, RemcosRAT, screenconnect. 617 of these domains have been flagged by threat intelligence feeds including Google Safe Browsing and URLhaus. The connected infrastructure includes 1649 phone numbers (5408463620, 8552597377, 8007873903) with 7110 FTC complaints; 143 companies (Informative LLC, HomePlus Corporation, Doral Capital Corporation) with 8547081 CFPB complaints; 807 email addresses (kellymoore_64@yahoo.com, schantzsybg7@...
parceldeliverygo.com
First seen Mar 20, 2026
- No SSL certificate
- 1 community report from users
Campaign Intelligence
Details
Related Domains
No known connections to other entities yet.
Community Reports
a person calling themselve Lydia Shift contacted several crafts groups offering a large 8-harness loom, purportedly her husband's (who had recently died). He wanted to give it to someone who would use it. I teach weaving to a number of elderly women, and the "offer" had come from a supposedly reputable source so we reached out. "Lydia" agreed to send it to us, if we would split the shipping, which her "cousin" quoted as $461. We slightly overpaid ($270) via Venmo (to her 'cousin's' account (a "Rachel Howard"). The shipping as supposed to go through "parceldeliverygo.com" who's "tracking" system finally told us the item was in "Coyle" - but we needed to pay an additional $211 for 'storage and fuel surchage' - interesting the exact amount still not paid from the original shipping we supposed to "split". But the tracking system has no contact info other than a generic "support@" email - so we have to way to pay, even if we wanted to. Contacting "Lydia" and she said we could just pay the additional amount (she's so sorry she forgot to mention it) to her 'cousin' and she could contact the shipper. I've demanded that she give ME the shippers contact info but she has yet to do so. I'm sure this is another of her scams (she's been reported on BBB before) and I should have checked first. Fool me once.... BEWARE of LYDIA SHIFT, RACHEL HOWARD, AND PARCELDELIVERYGO.COM .css-c8hvdp{--Grid-columns:12;-webkit-flex-direction:row;-ms-flex-direction:row;flex-direction:row;min-width:0;box-sizing:border-box;display:-webkit-box;display:-webkit-flex;display:-ms-flexbox;display:flex;-webkit-box-flex-wrap:wrap;-webkit-flex-wrap:wrap;-ms-flex-wrap:wrap;flex-wrap:wrap;gap:var(--Grid-rowSpacing) var(- [BBB Scam Type: Online Purchase] [Business: RACHEL HOWARD AND PARCELDELIVERYGO.COM] [Location: OK, USA- 73044]
Share Your Experience
What's Your Exposure?
Know your risk exposure to this message with a Thorough Analysis. It returns a detailed report covering the complaint history, your data breach exposure, related scam entities, and risk signals tied to this email message. Check the box and enter your email address now.
Proton Pass — Unique passwords for every account
After a breach, reused passwords let attackers into your other accounts. Proton Pass generates and stores a unique password for each one.