This cluster centers on 3287 connected domains tagged as HijackLoader, RemcosRAT, screenconnect. 617 of these domains have been flagged by threat intelligence feeds including Google Safe Browsing and URLhaus. The connected infrastructure includes 1649 phone numbers (5408463620, 8552597377, 8007873903) with 7110 FTC complaints; 143 companies (Informative LLC, HomePlus Corporation, Doral Capital Corporation) with 8547081 CFPB complaints; 807 email addresses (kellymoore_64@yahoo.com, schantzsybg7@...
(863) 274-8948
Last reported Mar 20, 2026
- 2 community reports from users
Campaign Intelligence
Details
Connected Entities
No known connections to other entities yet.
Community Reports
We have found that there are some malicious activities associated with your Apple iCloud account. There was also an attempt of a transaction of $893.97 at "APPLE Store - CA" using Apple Pay (Pre Authorization) recently. In addition, there were some malicious attempts of signing in and activating Apple Pay. If this activity is familiar, no action is required, and the transaction will proceed within 4 hours. If not, contact Apple Support immediately at +1-863-274-8948 for assistance. Stay Secure Apple Dispute Services +1-863-274-8948" [BBB Scam Type: Phishing] [Business: Apple Dispute Services Impostor Date] [Location: OH, USA- 44720]
I received a text saying unverified Apple Pay usage Apple Agent click to call 1 863 274 8948 Apple ID (case I’d xxxxxxx) has triggered a security warning. A pending $587.99 charge at Apple Store Orlando FL was detected via Apple Pay preauthorization. Additionally multiple unauthorized sign in attempts and Apple Pay set up requests from unknown devices have been flagged. These actions are temporarily blocked, and the charge is under investigation. If this activity is familiar, no action is required, and the transaction will proceed within two hours. If not, contact Apple support immediately at 1 863 274 8948 for assistance. Then it states it’s from Apple Dispute Division. I called it and this guy is asking all these questions and I’m worried, he’s trying to get too much info. So, I just told him make sure this transaction doesn’t go through cause it’s not me and that I’m nit giving him anymore info cause he may be a scammer too and hung up. @media (min-width:768px){.css-1w6dufj{-webkit-box-flex:0;-webkit-flex-grow:0;-ms- [BBB Scam Type: Phishing] [Business: Apple / Apple Pay Text] [Location: TN, USA- 37347]
Share Your Experience
What's Your Exposure?
Know your risk exposure to this message with a Thorough Analysis. It returns a detailed report covering the complaint history, your data breach exposure, related scam entities, and risk signals tied to this email message. Check the box and enter your email address now.
Proton VPN — Block malicious sites and encrypt your connection
Proton VPN routes your traffic through encrypted servers and blocks known malware domains. Free plan available.