Scam Detective

Scam Campaign

Archive Scam, lun.marvek.live

Identified on 5/29/2026

How This Campaign Connects

The primary entity at the center and the rest of the cluster around it. Showing the 4 highest-risk connections; 4 more in this cluster.

Primary Entity

domain

lun.marvek.live
High Risk
  • Flagged by Google Safe Browsing
  • No SSL certificate

Campaign Narrative

This cluster centers on 9 connected domains tagged as Password: lunex, PureCrypter, zip. The domains include lunt.revio.live, lunq.revio.live, lunme.onters.sbs, lunhx.onters.sbs, lunqv.hollower.sbs, lungx.hollower.sbs, lunhx.hollower.sbs, lunts.hollower.sbs, lun.marvek.live. 9 of these domains have been flagged by threat intelligence feeds including Google Safe Browsing and URLhaus.

Flagged domains in this cluster, lunt.revio.live, lunq.revio.live, lunme.onters.sbs, lunhx.onters.sbs, lunqv.hollower.sbs, lungx.hollower.sbs, lunhx.hollower.sbs, lunts.hollower.sbs, lun.marvek.live.

This campaign was identified through automated analysis of threat intelligence feeds and entity relationship mapping.

Entity Roster

Data Sources

Scam Prevention Resources

Proton Pass Unique passwords for every account

After a breach, reused passwords let attackers into your other accounts. Proton Pass generates and stores a unique password for each one.

View all campaigns