This cluster centers on 3287 connected domains tagged as HijackLoader, RemcosRAT, screenconnect. 617 of these domains have been flagged by threat intelligence feeds including Google Safe Browsing and URLhaus. The connected infrastructure includes 1649 phone numbers (5408463620, 8552597377, 8007873903) with 7110 FTC complaints; 143 companies (Informative LLC, HomePlus Corporation, Doral Capital Corporation) with 8547081 CFPB complaints; 807 email addresses (kellymoore_64@yahoo.com, schantzsybg7@...
(833) 743-9235
Last reported Mar 20, 2026
- 1 community report from users
Campaign Intelligence
Details
Connected Entities
No known connections to other entities yet.
Community Reports
I went to Lowe's to purchase my deck material for a job. I'm a contractor. I was asked to fill out a survey at the contractor desk. It said on my phone that I won a $500 gift card. My salesman, Tom, said here is a number to call to ask about the gift card. I talked to him and said in 2-5 hours I would receive the gift card through my email. It was at 10:30 am on March 14 I called them at 1-877-513-9766 then at 1:30 pm I got a call about the gift card 1-833-743-9235. He asked me to look in my Spam folder and there was a notice from Lowe's. It was a detailed note about the gift card. He asked me to read the whole page. I said no. He asked if I had an Apple, Android phone and wanted me to open up an app for him. I told him no but I will call the manager at the Wentzville Lowe's about this. This was a scam. I texted my salesman and he was real busy. I told him I think this is a scam. I talked with Angie, manager and I had to talk to the store manager. They are going to investigate this for me but I reported it to the BBB. .css-1w6dufj{-webkit-box-flex:0;-webkit-flex-grow:0;-ms-flex-positive:0;flex-grow:0;-webkit-flex-basis:auto;-ms-flex-preferred-size:auto;flex-basis:auto;width:calc(100% * 12 / var(--Grid-parent-columns) - (var(--Grid-parent-columns) - 12) * (var(--Grid-parent-columnSpacing) / var(--Grid-parent-columns))) [BBB Scam Type: Phishing] [Business: Lowe's - imposter] [Location: MO, USA- 63385]
Share Your Experience
What's Your Exposure?
Know your risk exposure to this message with a Thorough Analysis. It returns a detailed report covering the complaint history, your data breach exposure, related scam entities, and risk signals tied to this email message. Check the box and enter your email address now.
NordVPN — Block threats and hide your IP from trackers
NordVPN encrypts your internet traffic and blocks malicious websites, ads, and trackers before they reach your device.