Our cybersecurity team has identified a sophisticated fraudulent campaign impersonating CVS Pharmacy through a network of 6 connected entities, including phone number 3043810972 and 5 malicious domains. The primary domains cvsbonus.com and www.cvsbonus.com were both registered through NAMECHEAP INC on August 23, 2025, while a related domain highlandcowplushie.com was registered the following day on August 24, 2025. These three domains share the same infrastructure with moderate confidence levels...
Part of: Domain Campaign3/28/2026