This is a single real Provenstone scan, start to finish. Eight live stores using one brand's
name, and the two operators quietly running most of them.
Real scan, real numbers. We ran Provenstone against an actual direct-to-consumer brand. The
counts, the registration dates, the evidence, and how the stores connect are exactly what the engine
produced. We changed only the brand name and the domains, to “Lumira,” because publicly naming
someone else's fakes without their say-so is the one thing our own terms say we never do.
The scan
48
Look-alikes checked
8
Live stores using the name
8
Taking payments now
2
Operator groups
Of 48 look-alike domains, eight are working storefronts selling under
the Lumira name, and every one of them can take a payment right now. Here is one of them, in full, and then
what ties them together.
One finding, in full
lumirahomestore.usTaking paymentsfirst seen 15 Sep 2026
A working store selling under the Lumira name
The page loads a live storefront with a cart and checkout, using the Lumira name and product styling.
observed at https://lumirahomestore.us · 15 Sep 2026
Registered two days before we scanned
The domain was created 48 hours before this scan. A brand-new domain already running a full store is a strong impostor signal.
public domain registration record (RDAP)
Not one of Lumira's own or authorized domains
We checked it against Lumira's own and authorized-seller list first. It is on neither, so it is never cleared by mistake.
Lumira authorized-domain list, checked before flagging
Byte-for-byte identical site icon to two other stores
Its favicon is the exact same file as two other stores in this scan, byte for byte. That is what links them together below.
favicon hash match across 3 domains
The connection
lumirahomesell.usregistered 2 days before the scan
lumirahomeshop.usregistered 2 days before the scan
lumirahomestore.usregistered 2 days before the scan
same site icon · registered the same week
Likely one operator
Three stores, run as one operation.
Strong link
Observed
Three domains serve a byte-for-byte identical site icon, and all three were registered within the same two-day window.
Inferred
Same build, same toolkit, spun up together. One setup, copied three times.
Hypothesis
One operator runs all three (a strong link, short of proof of a single named person). That is the point: one action against that operator can take down all three at once, instead of fighting them one at a time.
And there's a second group. Three more stores, lumiraoutlet.com, lumirasale.com, and
lumirashop.com, are tied together a different way: they serve the same product catalog from the
same back-end vendor, and were all registered about seven weeks ago. A separate operator, same playbook.
Likely link
What you'd do next
Confirm none of these are yours
We already cleared your own and authorized domains. You give the list a final look and flag any seller you actually allow, so we never act on a domain you approve.
A takedown packet for the eight live stores
For each one, the sourced, dated evidence a registrar, host, or marketplace needs, plus the trademark basis. Reviewed by counsel before it goes out. You approve every one before we send it.
Take each group down together
The two operator groups can be actioned at the operator level, so three sites come down from one filing instead of three separate fights.
Watch for the next one
New look-alikes get registered constantly. Provenstone keeps watching the public certificate and domain records and flags the next Lumira store the day its certificate appears.
How we know, and what we don't claim
Public records only. Every line above comes from records anyone can look up: certificate
logs, domain registration, and pages open to any visitor. We never sign in, bypass anything, or touch a
private system.
Leads, not proof. We flag, we show the evidence, and you decide. We never call anything counterfeit,
and we label what we saw, what we
infer, and what is a
hypothesis with a confidence level, so you always
know which is which. More on exactly how we source and where we draw the line is on our
How we source page.