This cluster centers on 1486 connected domains tagged as None, keylogger. 5 of these domains have been flagged by threat intelligence feeds including Google Safe Browsing and URLhaus. The connected infrastructure includes 1364 phone numbers (3124141737, 3163966869, 8553892999) with 17909 FTC complaints; 170 companies (EQUIFAX, INC., TRANSUNION INTERMEDIATE HOLDINGS, INC., BANK OF AMERICA, NATIONAL ASSOCIATION) with 8747332 CFPB complaints; 187 email addresses (xxxxxxxxxxxxxxxxxxxxxxxx@vmh5.grup...
Domain
cursor.com
First seen Mar 27, 2026
Suspicious
- No SSL certificate
- 1 community report from users
Campaign Intelligence
Details
Related Domains
Community Reports
I ordered home improvement products from a website purporting to be MD Building Supplies and was sent fake tracking information which showed the product was being delivered from London, England. The product never arrived. Shortly thereafter, my credit card was used to purchase services at cursor.com, an AI company scammers often use to build fake websites. Cursor.com refused my refund and instead allowed the scammers to continue using their services at my bank's expense, as being involved in crime appears to pay cursor.com better than helping stop it. [BBB Scam Type: Online Purchase] [Business: MD Building Supplies] [Location: TX, USA- 75428]
1 day ago
Share Your Experience
What's Your Exposure?
Know your risk exposure to this message with a Thorough Analysis. It returns a detailed report covering the complaint history, your data breach exposure, related scam entities, and risk signals tied to this email message. Check the box and enter your email address now.
Proton Pass — Unique passwords for every account
After a breach, reused passwords let attackers into your other accounts. Proton Pass generates and stores a unique password for each one.
Try Proton Pass freeAffiliate link. We may earn a commission.