**Scam Campaign Report: Coordinated E-commerce Fraud Network**
Our analysis has identified a sophisticated e-commerce scam campaign involving six interconnected domains operating under shared infrastructure: snugglewarm.com, contactsnugglewarm.com, www.versalux.shop, sherpacozy.com, avajean.com, and avaandjune.com. All domains were registered through TUCOWS.COM, CO. within a five-day period between September 25-30, 2025, indicating coordinated setup. The network exhibits 17 cross-entity relationships, with 15 connections based on same infrastructure sharing and 2 based on co-reporting patterns, all with moderate to low confidence scores ranging from 0.35 to 0.50.
The campaign appears to target consumers seeking home comfort products, particularly heated blankets and cozy apparel. Community reports reveal a consistent pattern of deceptive advertising and product substitution fraud. Multiple consumers reported ordering heated blankets with built-in heating elements from snugglewarm.com but receiving cheap, non-functional alternatives instead. One victim specifically noted ordering a "fleece heated snuggle blanket with built-in heating elements for the body and feet" but receiving substandard merchandise. Another consumer received "a very thin and cheap wearable blanket that is reverse design of the one I ordered and there is no electric heating element." The reports indicate potential targeting around holiday gift purchasing, with at least one consumer seeking Christmas gifts for family members.
The shared infrastructure across all six domains suggests a single operator or coordinated group managing multiple storefronts to maximize reach while evading detection. The relationship between snugglewarm.com and contactsnugglewarm.com through co-reporting indicates these sites are being used in tandem, likely with the secondary domain serving as a customer service front or payment processor for the primary scam site.
**Consumer Protection Advice:** Before purchasing from unfamiliar websites, verify legitimacy by checking domain registration dates (recently registered domains are red flags), reading independent reviews, and confirming physical business addresses and phone numbers. If contacted by these entities, hang up immediately, do not click any links in emails or texts, and avoid providing personal or financial information. Report suspicious activity to the FTC at reportfraud.ftc.gov or file complaints with the FCC. To check if a domain or phone number has been reported as fraudulent, search consumer protection databases and review sites before engaging.
This campaign represents a moderate threat level with confirmed consumer financial losses and product substitution fraud. Immediate action should include blocking all six identified domains, issuing consumer alerts about heated blanket and comfort product scams, and coordinating with TUCOWS.COM, CO. to investigate the shared infrastructure and potentially suspend the fraudulent registrations.