This scam campaign involves a network of 6 connected domains operated through shared infrastructure and designed to defraud consumers through fake prize notifications and fraudulent supplement sales. The primary components include CVS-themed prize scam domains (www.cvswinner.com and cvswinner.com) and a fraudulent supplement retailer (trygoodgrove.com), along with associated domains lumensale.com, www.gregordiagnosticsinc.com, and winner.com. All domains except winner.com were registered through NAMECHEAP INC between February 3-11, 2026, indicating coordinated campaign timing.
The campaign's infrastructure shows deliberate coordination through 9 documented relationships connecting these entities. The CVS-themed domains (www.cvswinner.com and cvswinner.com) share infrastructure with trygoodgrove.com, while lumensale.com and www.gregordiagnosticsinc.com operate on the same infrastructure. Additionally, www.cvswinner.com and winner.com have been reported together by consumers, suggesting they are used in tandem to create the appearance of legitimacy. This shared infrastructure pattern allows the operators to quickly pivot between different scam types while maintaining operational control.
Consumer reports reveal the campaign's dual approach targeting victims through both fake prize notifications and fraudulent health product sales. Multiple consumers reported receiving voicemails claiming they won "up to a $250 gift from CVS" and directing them to visit www.cvswinner.com to claim their prize. Separately, consumers identified trygoodgrove.com as a fraudulent supplement retailer claiming to sell "Tart Cherry extract capsules" while deliberately obscuring contact information by not listing phone numbers or physical addresses. This lack of legitimate contact information is a common tactic to avoid accountability and prosecution.
To protect yourself from similar scams, always verify prize notifications by contacting the claimed company directly through official channels rather than using provided links or phone numbers. Legitimate companies like CVS do not typically conduct unsolicited prize giveaways requiring personal information submission. When shopping online for supplements or health products, research unfamiliar retailers and verify they provide legitimate contact information including physical addresses and phone numbers. If you receive suspicious calls, hang up immediately and do not click on any links in related emails or texts. Report these incidents to the FTC at reportfraud.ftc.gov or to the FCC for phone-related scams. To check if a phone number or domain is safe, search for it online along with terms like "scam" or "fraud" to see if others have reported problems.
This campaign represents a moderate threat level due to its coordinated infrastructure and multi-vector approach targeting consumers through both fake prizes and fraudulent product sales. The shared infrastructure suggests sophisticated operators capable of quickly adapting their tactics. Consumers should remain vigilant for similar CVS-themed prize scams and research any unfamiliar online retailers before making purchases. Regulatory authorities should monitor the identified domains and their shared infrastructure for continued fraudulent activity.