First seen Apr 27, 2026
This cluster centers on 10 connected domains identified through shared infrastructure and registration patterns. The domains include stssy.com, elvayn.com, homeshoppingdeal.com, theparisluxeco.com, zezianne.com, capitalloancenter.com, brrandbuuz.com, kiraglasses.com, fiviora.com, cinemadiscs.com. This campaign was identified through automated analysis of threat intelligence feeds and entity relationship mapping.
cinemadiscs.com
same infrastructuredomainkiraglasses.com
same infrastructuredomaincapitalloancenter.com
same infrastructuredomaintheparisluxeco.com
same infrastructuredomainzezianne.com
same infrastructuredomainbrrandbuuz.com
same infrastructuredomainhomeshoppingdeal.com
same infrastructuredomainelvayn.com
same infrastructuredomainstssy.com
same infrastructureNordstrom Clearance page comes up, after selections submit and moneyis sent to AWX*VSDTHREADUOST, which is Fiviora.com. Fiviora.com appears on URL of product page. Says deliver from Los Angeles 3-4 days. Contacted Viviora to whereabouts product. Get run around about delivery time. Sent fake order# xxxxxxx and Track718.US #xxxxxxx. keeps you guessing on delivery dates ect. Many bad reviews online including one on BBB. other info and pics also to prove. [BBB Scam Type: Online Purchase] [Business: Fiviora] [Location: FL, USA - 32708]
Know your risk exposure to this message with a Thorough Analysis. It returns a detailed report covering the complaint history, your data breach exposure, related scam entities, and risk signals tied to this email message. Check the box and enter your email address now.