This cluster centers on 3 connected domains identified through shared infrastructure and registration patterns. Do not click links to any of the flagged domains. If you have visited one, check your accounts for unauthorized activity and consider changing your passwords. You can report suspicious contacts to the FTC at reportfraud.ftc.gov or to the FCC at consumercomplaints.fcc.gov. This campaign was identified through automated analysis of threat intelligence feeds and entity relationship mapp...
lumensale.com
First seen Mar 25, 2026
- Domain registered 45 days ago
- No SSL certificate
- WHOIS registration hidden
Campaign Intelligence
This scam campaign involves a network of six interconnected fraudulent domains operating under shared infrastructure, with five domains registered through NAMECHEAP INC between February 3-11, 2026. The primary domains include www.cvswinner.com, cvswinner.com, trygoodgrove.com, www.gregordiagnosticsinc.com, lumensale.com, and winner.com. These entities are connected through 18 documented relationships, with 15 instances of shared infrastructure connections and multiple cases of domains being repo...
Details
Related Domains
Community Reports
Popped up as a deal on Facebook thru Shopify. https://lumensale.com/ Dollars Lost $27.97 [BBB Scam Type: Online Purchase] [Business: Lumen sales] [Location: PA, USA- 18702]
Order was placed via Facebook (lumensale.com) now can’t be found! Tried to track info and said invalid tracking number never got email confirmation either Dollars Lost $37.99 [BBB Scam Type: Online Purchase] [Business: trackingmyshipping.to.facebook Date] [Location: OK, USA- 73102]
Share Your Experience
What's Your Exposure?
Know your risk exposure to this message with a Thorough Analysis. It returns a detailed report covering the complaint history, your data breach exposure, related scam entities, and risk signals tied to this email message. Check the box and enter your email address now.
NordPass — Stop reusing passwords across accounts
After a breach, attackers try stolen passwords on every site you use. NordPass generates and stores a unique password for each account.