This cluster centers on 3287 connected domains tagged as HijackLoader, RemcosRAT, screenconnect. 617 of these domains have been flagged by threat intelligence feeds including Google Safe Browsing and URLhaus. The connected infrastructure includes 1649 phone numbers (5408463620, 8552597377, 8007873903) with 7110 FTC complaints; 143 companies (Informative LLC, HomePlus Corporation, Doral Capital Corporation) with 8547081 CFPB complaints; 807 email addresses (kellymoore_64@yahoo.com, schantzsybg7@...
(206) 852-5580
Last reported Mar 20, 2026
- 1 community report from users
Campaign Intelligence
Details
Connected Entities
No known connections to other entities yet.
Community Reports
Business: Insight by Matthew Phone numbers used to contact me: 702-352-4654, 725-347-4514, 206-852-5580, 702-350-3890 Beginning on December 26, I was contacted online by an individual who claimed to be a psychic offering relationship readings and spiritual services. They told me they could perform rituals and love realization ceremonies to repair my relationship with someone that I broke their heart and also claiming that I had enities inside of me since I was born thats been affecting my life. The individual initially requested a small payment for spiritual materials and claimed the service included a 100% money-back guarantee if the work did not succeed. After the first payment was sent, they repeatedly claimed that additional spiritual issues had appeared that required further payments in order to continue or complete the ritual. Over time, the person requested payments through multiple digital platforms including Cash App, Chime, Venmo, Apple Pay, and Zelle. They also communicated using multiple phone numbers, claiming that different people were involved in the spiritual work or that messages were being sent from other phones. They sent photos and videos claiming to show crystals, rituals, and spiritual materials, and attempted to make the service appear legitimate by sending a fake invoice (shown below) listing supposed spiritual materials and costs related to the ceremony. Throughout the process, the individual created urgency and pressure, repeatedly telling me that I was “running out of time” and that payments had to be sent immediately or the ritual would fail. They often claimed the work had to be completed within minutes and pressured me to send whatever money I had available. They also used manipulative and threatening language related to refunds, including statements such as: “You’re running out of time.” “Reverse image search that. Tell me it pops up because it won’t.” “Do yo [BBB Scam Type: Online Purchase] [Business: Insightbymatthew] [Location: FL,
Share Your Experience
What's Your Exposure?
Know your risk exposure to this message with a Thorough Analysis. It returns a detailed report covering the complaint history, your data breach exposure, related scam entities, and risk signals tied to this email message. Check the box and enter your email address now.
NordProtect — Identity theft monitoring and recovery
NordProtect watches for your personal info on the dark web, monitors your credit, and covers up to $1M in identity theft insurance.