[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"intel-networks":3},[4,15,25,34,43,53,62,70,79,87,96,103,110,117,124,131,138,146,153,159,166,172,179,186,194,200,207,213,219,226,232,238,246,252,258,264,270,276,282,288,294,300,306,312,318,324,331,337,344,350,356,362,368,374,380,386,392,398,404,410,416,422,428,434,440,446,452,458,464,470,476,482,488,494,500,506,512,518,524,530,536,542,548,554,560,566,572,578,584,590,596,602,608,614,620,626,632,638,644,650,656,662,668,674,680,686,692,698,704,710,716,722,728,734,740,746,752,758,764,770,776,782,788,794,800,806,812,818,824,830,836,842,848,854,860,866,872,878,884,890,896,902,908],{"slug":5,"name":6,"category":7,"status":8,"description":9,"domainCount":10,"ipCount":11,"signalCount":12,"firstSeen":13,"lastSeen":14},"veltrix-markets","Veltrix Markets","cfd-forex","active","Large network of cloned forex\u002FCFD broker sites built from one shared 'Trade Global Markets' marketing template.",753,499,39,"2026-03-05T02:08:48.787Z","2026-09-11T02:41:19.373Z",{"slug":16,"name":17,"category":18,"status":8,"description":19,"domainCount":20,"ipCount":21,"signalCount":22,"firstSeen":23,"lastSeen":24},"gambler-panel-cluster","Gambler Panel Cluster","mixed","Crypto-casino scam network built on one shared 'blockchain casino \u002F take your free reward' platform.",376,197,27,"2026-03-02T02:09:13.390Z","2026-09-11T03:48:46.077Z",{"slug":26,"name":27,"category":7,"status":8,"description":28,"domainCount":29,"ipCount":30,"signalCount":31,"firstSeen":32,"lastSeen":33},"helios-capital-syndicate","Helios Capital Syndicate","Large fake-investment and fake-trading affiliate network of about 204 domains unified by one operator through shared Google Analytics and Google Tag Manager IDs. Shares operator tracking IDs with the Veltrix Markets cluster, marking it as the same operator's broader network; member alphastockinvestment.com carries a UK FCA warning.",219,185,16,"2026-03-05T02:07:51.614Z","2026-09-08T09:26:22.963Z",{"slug":35,"name":36,"category":18,"status":8,"description":37,"domainCount":38,"ipCount":39,"signalCount":40,"firstSeen":41,"lastSeen":42},"txex-exchange","Txex Exchange","TXEX is a Ponzi-style fake crypto exchange promoted through WhatsApp and Telegram 'mentor', 'coach' and 'crypto adviser' groups that drip daily 'trading signals' and promise ~100% returns. Victims fund an account they can never cash out: withdrawals are blocked behind a so-called 'release fee' that recovers nothing. New Zealand's FMA warned in April 2025 and tied 30 corporate entities and 813 duplicate websites to it, TXEX is the flagship brand of the ~$150M TXEX–DSJ scam-compound network (276 arrests).",159,33,2,"2026-04-07T22:16:01.994Z","2026-08-25T15:06:16.889Z",{"slug":44,"name":45,"category":46,"status":8,"description":47,"domainCount":48,"ipCount":49,"signalCount":50,"firstSeen":51,"lastSeen":52},"roblox-scan-scam","Roblox Scan Scam","crypto","Network posing as a Roblox 'scan \u002F free Robux' service, rebuilt from a former fake 'world-class open source' crypto exchange.",103,53,8,"2026-03-05T04:13:46.598Z","2026-06-13T16:55:23.266Z",{"slug":54,"name":55,"category":46,"status":8,"description":56,"domainCount":57,"ipCount":58,"signalCount":59,"firstSeen":60,"lastSeen":61},"glydex-network","Glydex Network","Fake exchanges built on the 'buy crypto, sell & invest, pioneered the concept of seamless trading' template.",65,47,13,"2026-03-05T04:53:06.062Z","2026-08-04T00:43:30.021Z",{"slug":63,"name":64,"category":18,"status":8,"description":65,"domainCount":57,"ipCount":66,"signalCount":67,"firstSeen":68,"lastSeen":69},"dsj-exchange","DSJ Exchange","DSJ Exchange (DSJEX) and its sister brand BG Wealth Sharing ran a $150M+ crypto Ponzi that promised 1.3–2.6% daily returns from fake 'AI trading signals', paying small early withdrawals to build trust. It faked a US SEC licence and, just before collapsing in April 2026, demanded a 12% 'tax' on balances, the classic Ponzi exit scam. It was named by 13 regulators across five continents (Philippines SEC, Australia's ASIC, Utah, Washington DFI, Tonga, Samoa…) and is the core of the TXEX–DSJ network.",31,1,"2026-03-08T04:26:48.023Z","2026-08-05T23:50:27.057Z",{"slug":71,"name":72,"category":7,"status":8,"description":73,"domainCount":74,"ipCount":75,"signalCount":76,"firstSeen":77,"lastSeen":78},"cognivault-ai","Cognivault AI","Multilingual network of fake 'AI-powered trading platforms' posing as official sites (EN\u002FIT\u002FFR\u002FES\u002FNL\u002FJA). Umbrella for the 'official website' copy beyond the four exact dom variants.",49,37,3,"2026-03-19T05:35:45.159Z","2026-09-11T03:28:41.960Z",{"slug":80,"name":81,"category":46,"status":8,"description":82,"domainCount":83,"ipCount":84,"signalCount":50,"firstSeen":85,"lastSeen":86},"tournadex-exchange","Tournadex Exchange","Crypto exchange clones with a 'buy & sell bitcoin, ethereum' headline and a swap \u002F spot \u002F margin \u002F tournament \u002F futures nav.",46,29,"2026-03-05T04:52:06.901Z","2026-09-11T01:30:28.781Z",{"slug":88,"name":89,"category":18,"status":8,"description":90,"domainCount":91,"ipCount":92,"signalCount":93,"firstSeen":94,"lastSeen":95},"uicex-exchange","Uicex Exchange","UICEX (operated by CR Group LLC \u002F CRGLOBAL) is a fake crypto exchange built on viral recruitment, simulated trading returns to early users and even meal reimbursements for recruiters, a textbook Ponzi where the 'trading' exists only to build trust before withdrawals are frozen. The NZ FMA warned on 7 July 2025; after exposure the operators rebranded it as 'Signal Raiders'. Part of the TXEX fraud-exchange network.",45,19,0,"2026-04-10T18:10:53.720Z","2026-06-19T08:54:13.857Z",{"slug":97,"name":98,"category":18,"status":8,"description":99,"domainCount":91,"ipCount":100,"signalCount":67,"firstSeen":101,"lastSeen":102},"grokr-exchange","Grokr Exchange","GROKR Exchange poses as an automated 'AI trading bot' platform promising 2–3% daily returns, recruiting victims through fake Facebook, Instagram and TikTok ads and profiles. Behind the facade it is a Ponzi (linked to the Wealth Win-Win Fund \u002F W3F) that pays early users with new deposits, then blocks withdrawals and disappears in a sudden exit scam. It is unregistered and has drawn warnings across multiple jurisdictions.",17,"2026-04-08T00:55:50.064Z","2026-07-22T03:21:27.635Z",{"slug":104,"name":105,"category":7,"status":8,"description":106,"domainCount":107,"ipCount":12,"signalCount":67,"firstSeen":108,"lastSeen":109},"cirro-forex-network","Cirro Forex Network","Forex\u002FCFD scam sites all built on the commercial 'Cirro – Forex and Finance' website template (its shared asset\u002Fjs signature across all 4 homepage designs). Using the same off-the-shelf kit ties the network together; combine with scam indicators before flagging.",43,"2026-03-20T20:49:10.095Z","2026-07-10T14:00:38.252Z",{"slug":111,"name":112,"category":7,"status":8,"description":113,"domainCount":75,"ipCount":66,"signalCount":114,"firstSeen":115,"lastSeen":116},"virelta-banking","Virelta Banking","Banking-themed websites sharing the same 'Simple, Quick, Secured' digital-banking template, page copy and interface across multiple DOM variants. Grouped by reviewed template evidence; shared code alone does not establish common ownership.",6,"2026-07-25T03:23:58.277Z","2026-08-05T00:53:07.260Z",{"slug":118,"name":119,"category":18,"status":8,"description":120,"domainCount":39,"ipCount":121,"signalCount":93,"firstSeen":122,"lastSeen":123},"uzex-exchange","Uzex Exchange","UZEX (uzex.com) is a fake crypto exchange the NZ FMA blacklisted on 25 April 2025 for operating unlicensed, market manipulation (pump-and-dump and wash trades) and fraud. Users report accounts banned for fabricated 'malicious activity' even after full KYC, and withdrawal requests that are never processed. It is named among the TXEX \u002F League of Whalefall associated exchanges.",10,"2026-04-10T18:26:53.351Z","2026-04-24T21:35:09.964Z",{"slug":125,"name":126,"category":18,"status":8,"description":127,"domainCount":128,"ipCount":40,"signalCount":67,"firstSeen":129,"lastSeen":130},"tpbit-exchange","TPBit Exchange","TPBit (tpbitax.com) is a crypto Ponzi pushed through WhatsApp referral groups advertising 'guaranteed', stable profits, where a small initial withdrawal is allowed to build confidence before deposits are frozen and 'fees' are demanded. New Zealand's FMA added it to its blacklist on 1 August 2025 as an unregistered, fraudulent entity, and victims report losses of $30,000+. It is one of the TXEX-linked exchanges.",32,"2026-03-02T04:08:40.921Z","2026-04-28T00:26:12.252Z",{"slug":132,"name":133,"category":18,"status":8,"description":134,"domainCount":128,"ipCount":135,"signalCount":93,"firstSeen":136,"lastSeen":137},"optcoin-exchange","Optcoin Exchange","OPT Coin (optcoin.com) is a fake crypto-exchange network that fabricates account balances and live 'profits', then blocks every withdrawal behind invented 'fees' and 'taxes'. It recruits through chat groups and influencers using fake testimonials and promises of guaranteed, unusually high returns, with no link to any licensed financial provider. NZ FMA-warned and unregulated; part of the TXEX fraud-exchange network.",4,"2026-04-10T09:20:50.091Z","2026-04-25T15:22:13.314Z",{"slug":139,"name":140,"category":18,"status":8,"description":141,"domainCount":142,"ipCount":143,"signalCount":93,"firstSeen":144,"lastSeen":145},"dobibo-exchange","Dobibo Exchange","Multi-language crypto futures exchange ('Dobibo*' brand family), futures, perpetuals and 'liquidity mining'; from a regulator fraud-platform list, now mostly defunct or phishing-flagged.",30,12,"2026-04-07T14:52:43.286Z","2026-04-22T23:46:45.562Z",{"slug":147,"name":148,"category":18,"status":8,"description":149,"domainCount":150,"ipCount":93,"signalCount":93,"firstSeen":151,"lastSeen":152},"xuex-exchange","Xuex Exchange","XUEX (xuex21.com) is a 'pig-butchering' fake crypto exchange that releases small early withdrawals to make victims feel safe, then blocks larger ones behind surprise 'fees' and 'taxes'. It carries an NZ FMA blacklist listing and shares the exact site template as PCEX and LWEX, marking it as part of the same scam network. Victims report missing BTC, ETH and USDT.",28,"2026-04-10T21:05:49.790Z","2026-09-08T13:23:10.968Z",{"slug":154,"name":155,"category":18,"status":8,"description":156,"domainCount":22,"ipCount":39,"signalCount":67,"firstSeen":157,"lastSeen":158},"radianite-skins-ring","Radianite Skins Ring","Network of fake Valorant 'free skins \u002F skin giveaway' sites impersonating pro player TenZ (valoskins, tenzworld, tenzvalor, valodex…). Lures players with non-existent free skins to phish Riot credentials and hijack Valorant accounts. Sites are short-lived and rotate domains (.pro\u002F.top\u002F.com).","2026-06-05T03:09:10.082Z","2026-08-26T06:33:37.343Z",{"slug":160,"name":161,"category":18,"status":8,"description":162,"domainCount":163,"ipCount":40,"signalCount":67,"firstSeen":164,"lastSeen":165},"lwex-exchange","LWEX Exchange","LWEX (lwex4.com) is a pyramid\u002FPonzi-style fake crypto exchange promoted across Telegram, WhatsApp, Facebook and Reddit with outsized profit claims, that secures an initial deposit then stalls withdrawals indefinitely. It has been flagged by New Zealand's FMA, France's AMF (June 2025) and Lithuania's central bank (April 2025), which called out its pyramid-scheme traits. It shares the PCEX\u002FXUEX template.",25,"2026-04-07T17:02:12.739Z","2026-06-18T22:42:59.453Z",{"slug":167,"name":168,"category":18,"status":8,"description":169,"domainCount":163,"ipCount":93,"signalCount":93,"firstSeen":170,"lastSeen":171},"pcex-exchange","Pcex Exchange","PCEX is a coordinated network of fake crypto exchanges that fabricate trading results and account balances, then block every withdrawal behind 'fees', 'taxes' or demands for further deposits. New Zealand's FMA blacklisted it on 25 April 2025, and it shares the same layout as XUEX and LWEX. The PCEX-branded pages have no affiliation with any licensed provider.","2026-04-10T09:01:35.764Z","2026-04-20T17:05:53.084Z",{"slug":173,"name":174,"category":18,"status":8,"description":175,"domainCount":176,"ipCount":40,"signalCount":93,"firstSeen":177,"lastSeen":178},"zzcoin-exchange","ZZCoin Exchange","ZZCOIN was the 'migration' brand of the TXEX \u002F League of Whalefall Ponzi: investors were told to move their balance to ZZCOIN because of a fake 'government investigation', then charged a $400 'verification fee' under threat of losing their account. Its app was distributed outside the official stores (potential malware), and no investor is known to have withdrawn funds after paying. Part of the TXEX network.",24,"2026-04-07T23:35:54.619Z","2026-04-28T02:30:59.089Z",{"slug":180,"name":181,"category":18,"status":8,"description":182,"domainCount":183,"ipCount":67,"signalCount":93,"firstSeen":184,"lastSeen":185},"ijex-exchange","Ijex Exchange","IJEX (ijex.com) is a 'pig-butchering' fake crypto exchange with no regulator, a fake stock-photo 'team', empty company details and a 10\u002F100 trust score. Scammers first build a fake romance or friendship over weeks via social media, dating apps or random texts, then steer the victim onto IJEX, a platform they fully control, where withdrawals are delayed or denied outright.",23,"2026-04-08T01:20:57.920Z","2026-04-23T00:16:24.712Z",{"slug":187,"name":188,"category":18,"status":8,"description":189,"domainCount":190,"ipCount":191,"signalCount":93,"firstSeen":192,"lastSeen":193},"hellobit-exchange","Hellobit Exchange","HelloBit is a 'click-a-button' crypto Ponzi: victims execute trades on bogus signals fed through the 'TSQ Investment Group' Telegram channel, while the operators domain-hop (hellobit.cc, hellobit8, hellobitese) to dodge takedowns. It was warned by New Zealand's FMA (April 2025) and Spain's CNMV (twice in 2025, as unauthorised to provide investment services). It is one of the TXEX-linked exchanges.",21,5,"2026-04-07T16:21:26.429Z","2026-06-05T04:56:34.843Z",{"slug":195,"name":196,"category":18,"status":8,"description":197,"domainCount":92,"ipCount":191,"signalCount":135,"firstSeen":198,"lastSeen":199},"hhhe-exchange","HHHE Exchange","HHHE (hhhexp.com) is a multi-language crypto-futures exchange, futures, perpetuals, 'convert' and 'liquidity mining', from the same regulator-warned, TXEX-style fraud-platform network. Like its siblings it fabricates balances and live profits, then blocks withdrawals behind fees. The sites are now defunct or flagged by browsers as phishing\u002Fmalware.","2026-04-08T01:11:02.054Z","2026-09-08T14:56:40.016Z",{"slug":201,"name":202,"category":7,"status":8,"description":203,"domainCount":204,"ipCount":92,"signalCount":76,"firstSeen":205,"lastSeen":206},"revodex-trading","Revodex Trading","Trading scam kit built on the 'revolutionizing your digital trading experience' template.",18,"2026-05-13T02:51:06.738Z","2026-08-05T01:56:35.130Z",{"slug":208,"name":209,"category":46,"status":8,"description":210,"domainCount":204,"ipCount":183,"signalCount":76,"firstSeen":211,"lastSeen":212},"multipair-labs","Multipair Labs","Crypto-exchange scam kit fronted by a live multi-pair price ticker (BTC\u002FETH\u002FLTC alongside football fan tokens like PSG, Juventus, Atletico Madrid and Chiliz). Uses short random-code .it\u002F.top domains and hides behind Cloudflare, which flags them as phishing.","2026-03-26T05:10:45.402Z","2026-09-11T02:23:50.316Z",{"slug":214,"name":215,"category":7,"status":8,"description":216,"domainCount":204,"ipCount":100,"signalCount":67,"firstSeen":217,"lastSeen":218},"phantom-bank-ring","Phantom Bank Ring","Network of fake online banks and credit unions (e.g. globalinsurancebank, moderncreditunionplc, secured MCU, liberty-trustunion, biscreditgroup) sharing one banking template. Used in advance-fee \u002F fund-recovery scams: victims are shown a balance 'held' in an account, then pressured to pay fees or 'taxes' to release funds that never arrive.","2026-04-26T08:15:51.125Z","2026-05-13T20:16:14.848Z",{"slug":220,"name":221,"category":46,"status":8,"description":222,"domainCount":204,"ipCount":223,"signalCount":40,"firstSeen":224,"lastSeen":225},"simplix-exchange","Simplix Exchange","Fake crypto exchanges built on the 'simplifies trading for a seamless, rapid and dependable experience' template.",14,"2026-03-05T04:16:46.194Z","2026-08-04T01:48:17.664Z",{"slug":227,"name":228,"category":18,"status":8,"description":229,"domainCount":100,"ipCount":40,"signalCount":93,"firstSeen":230,"lastSeen":231},"cbex-exchange","CBEX Exchange","CBEX (Crypto Bridge Exchange) was an AI-hyped crypto Ponzi that defrauded 250,000+ mostly Nigerian and Kenyan investors of an estimated $800M. It faked a decade of history and guaranteed 'AI trading' profits while quietly routing deposits out via the TRON network and laundering them cross-chain. It collapsed in April 2025 after Nigeria's SEC warning; the EFCC has since made arrests and issued further warrants.","2026-04-07T23:46:00.487Z","2026-06-05T04:42:54.875Z",{"slug":233,"name":234,"category":46,"status":8,"description":235,"domainCount":100,"ipCount":223,"signalCount":40,"firstSeen":236,"lastSeen":237},"finmarq-exchange","Finmarq Exchange","Crypto exchange clones built on a 'buy crypto · markets · exchange · finance' template.","2026-04-01T10:01:23.584Z","2026-09-11T02:16:27.888Z",{"slug":239,"name":240,"category":18,"status":8,"description":241,"domainCount":242,"ipCount":243,"signalCount":93,"firstSeen":244,"lastSeen":245},"riscoin-exchange","Riscoin Exchange","Riscoin (aka 'League of Seagulls' \u002F League of Seagull Ltd) is a copy-trading crypto Ponzi where fake 'crypto managers' promise unusually high, guaranteed daily returns through Telegram and Bonchat, while operators impersonate New Zealand banks and licensed firms to build trust. The Philippines SEC issued an advisory (12 Feb) and the NZ FMA warned; withdrawals are blocked behind extra 'fees' and 'taxes'.",15,11,"2026-04-07T20:01:14.910Z","2026-07-24T06:35:53.560Z",{"slug":247,"name":248,"category":7,"status":8,"description":249,"domainCount":242,"ipCount":242,"signalCount":67,"firstSeen":250,"lastSeen":251},"solventa-brokers","Solventa Brokers","Multi-asset broker scam kit pitching regulated-looking trust pages, 'who we are · licenses · security · solvency · affiliate program', across currencies, commodities, metals, stocks and indices. English-language sibling of the Russian 'Bilusevi' broker template; recruits through an affiliate program and blocks withdrawals once funded.","2026-04-07T14:04:16.650Z","2026-05-12T07:16:53.197Z",{"slug":253,"name":254,"category":46,"status":8,"description":255,"domainCount":223,"ipCount":31,"signalCount":135,"firstSeen":256,"lastSeen":257},"velnora-exchange","Velnora Exchange","Cryptocurrency exchange websites sharing the 'Explore Crypto, Trade with Trust' template, a $1,111 bonus promotion and matching FAQ copy across four reviewed DOM variants. Shared template evidence does not establish common ownership.","2026-07-03T09:00:49.235Z","2026-09-10T10:54:09.510Z",{"slug":259,"name":260,"category":46,"status":8,"description":261,"domainCount":223,"ipCount":191,"signalCount":40,"firstSeen":262,"lastSeen":263},"auvrion-presale","Auvrion Presale","Token-presale pages sharing a DOM fingerprint and GROK-themed presale copy. Snyfer uses this codename to identify the technical group; it is not the name of a verified operator.","2026-04-22T13:32:20.148Z","2026-09-11T03:38:43.262Z",{"slug":265,"name":266,"category":46,"status":8,"description":267,"domainCount":59,"ipCount":59,"signalCount":67,"firstSeen":268,"lastSeen":269},"vardenix-presale-ring","Vardenix Presale Ring","Token-presale kit sold under eight letter-shuffled brands (Kaarden, Klardven, Klaxio, Cadwiin, Cdween, Kvaden, Cladven, Kadvun): every site opens on '[Brand] Official Token Presale, the first blockchain-enabled open-source purchasing platform for the real and virtual world' and hands out a referral code on arrival. All eight run the same tawk.to live-chat account and share two favicons. Distinct from Kradven Brokers (#158), whose kradven\u002Fklardwen sites are a broker login template, despite the look-alike names.","2026-03-19T05:34:29.730Z","2026-09-11T00:14:18.722Z",{"slug":271,"name":272,"category":18,"status":8,"description":273,"domainCount":59,"ipCount":121,"signalCount":40,"firstSeen":274,"lastSeen":275},"bg-wealth-sharing","BG Wealth Sharing","BG Wealth Sharing LTD, fake investment group calling itself 'the world's largest hedge fund', the front for the DSJ Exchange crypto platform. A 'click-a-button' app Ponzi that pays early members from new deposits; it ran ~12 months and collapsed in May 2026 after defrauding users of $150M+. Warned by 13 regulators across five continents (Canada, New Zealand, Tonga, Samoa, UK, Philippines, Utah, Washington) before the collapse; the operators rebranded the same machinery as Swift Wave and HQI. Operates many bg* \u002F bgwealth* domains plus its own 'is it a scam?' alert sites. Other business names used: BG Wealth Group Inc., BGRE Capital Corporation, BG Wealth Group Growth Fund LP, BG Wealth Holdings Corporation, BG Wealth GP Inc., BG Wealth Properties Inc., BG Property Holdings Inc. (all found at bgwealthgroup.com) and Blackthorn Investment Group Inc.","2026-04-06T19:20:44.157Z","2026-08-05T01:15:14.031Z",{"slug":277,"name":278,"category":7,"status":8,"description":279,"domainCount":143,"ipCount":243,"signalCount":67,"firstSeen":280,"lastSeen":281},"hedgevault-cartel","Hedgevault Cartel","Cluster of forex and CFD trading scam sites linked by a shared Google Analytics 4 ID (G-P6QBGXDK3N), pointing to one operator. The sites pose as regulated brokers and hedge-style investment platforms to solicit deposits with promises of guaranteed returns.","2026-03-19T06:25:02.831Z","2026-08-03T03:32:43.369Z",{"slug":283,"name":284,"category":46,"status":8,"description":285,"domainCount":143,"ipCount":143,"signalCount":76,"firstSeen":286,"lastSeen":287},"orbital-presale-ring","Orbital Presale Ring","Fake 'SpaceX Token' presale sites on short spx*-style domains (spxwallets, spx30b, spcx90p, spx45k, spax33k): 'Early Access is Now Live', bonuses of up to 200%, payment in BTC\u002FETH\u002FBNB\u002FSOL\u002FUSDT and a countdown. Two tawk.to live-chat accounts are shared across the five. No affiliation with SpaceX.","2026-07-05T03:06:26.648Z","2026-08-21T08:14:04.008Z",{"slug":289,"name":290,"category":7,"status":8,"description":291,"domainCount":243,"ipCount":121,"signalCount":135,"firstSeen":292,"lastSeen":293},"pendralyx-brokers","Pendralyx Brokers","Network of fake forex\u002FCFD broker sites built on one shared 'Login to Webtrader, Welcome to the webtrader · your simple way to trade and learn' login template, fronted by invented brand names (ORBISOLYX, Pendoxa, Genesis Arbit, Grumblinion-Radiex, Possares-Renoyx, Quantiumax). Several are flagged as phishing; a classic fake-webtrader scam where a fabricated balance is shown but deposits can never be withdrawn.","2026-03-24T16:10:55.699Z","2026-09-05T03:21:58.577Z",{"slug":295,"name":296,"category":18,"status":8,"description":297,"domainCount":243,"ipCount":242,"signalCount":93,"firstSeen":298,"lastSeen":299},"sterling-drift-partners","Sterling Drift Partners","Forex and managed-investment scam cluster sharing a common code template, marketing high-return currency trading and wealth plans while refusing withdrawals and demanding extra fees; wealthinvest24.com carries a British Columbia Securities Commission investor warning. wealthinvest24.com is still live while fx-ln.com fails to resolve.","2026-04-24T04:36:29.586Z","2026-09-08T10:19:27.039Z",{"slug":301,"name":302,"category":18,"status":8,"description":303,"domainCount":243,"ipCount":50,"signalCount":40,"firstSeen":304,"lastSeen":305},"yepbit-exchange","Yepbit Exchange","Crypto futures-exchange scam family using the yepbit* naming pattern.","2026-03-08T04:00:28.090Z","2026-08-08T00:15:20.289Z",{"slug":307,"name":308,"category":18,"status":8,"description":309,"domainCount":243,"ipCount":40,"signalCount":93,"firstSeen":310,"lastSeen":311},"68ea-exchange","68EA Exchange","68EA (68eaidn.com \u002F 68ea-idn.com) is an advance-fee crypto-exchange scam that advertises high, 'risk-free' returns and aggressive referral incentives, then demands 'fees' or 'taxes' that never unlock a withdrawal. It appears on IOSCO's international I-SCAN alert list, having raised flags with securities regulators in several countries. The domains are now largely dead (parking \u002F 'access denied').","2026-04-07T23:31:05.788Z","2026-05-15T04:12:27.561Z",{"slug":313,"name":314,"category":46,"status":8,"description":315,"domainCount":243,"ipCount":243,"signalCount":76,"firstSeen":316,"lastSeen":317},"usdt-storage-center","USDT Storage Center","Crypto scam kit built on a 'USDT storage center, anniversary' high-yield deposit theme.","2026-03-21T09:02:03.076Z","2026-05-08T20:02:28.383Z",{"slug":319,"name":320,"category":7,"status":8,"description":321,"domainCount":121,"ipCount":121,"signalCount":135,"firstSeen":322,"lastSeen":323},"quizora-trading","Quizora Trading","Trading scam kit with a 20-language switcher and a 'home · quiz · faqs' nav.","2026-04-07T20:26:34.534Z","2026-08-02T00:10:08.813Z",{"slug":325,"name":326,"category":46,"status":8,"description":327,"domainCount":121,"ipCount":328,"signalCount":67,"firstSeen":329,"lastSeen":330},"cognivault-nord","Cognivault Nord","Fake 'AI trading platform | official website' sites (EN\u002FIT\u002FNL\u002FDE dom variant #2 of the Cognivault family).",7,"2026-03-24T21:22:32.299Z","2026-09-11T03:21:43.014Z",{"slug":332,"name":333,"category":18,"status":8,"description":334,"domainCount":121,"ipCount":76,"signalCount":67,"firstSeen":335,"lastSeen":336},"u6ex-exchange","U6ex Exchange","Fake crypto-exchange scam using the u6ex* naming family (u6ex.com\u002F.net\u002F.pro\u002F.one\u002F.today\u002F.vip). An unregulated 'exchange' that fabricates account balances and profits, then blocks withdrawals behind advance-fee \u002F 'tax' demands, flagged 1\u002F100 trust by scanners and documented as a withdrawal-blocking crypto scam. Rotates TLDs as domains get flagged.","2026-03-05T02:46:23.815Z","2026-07-30T10:01:24.251Z",{"slug":338,"name":339,"category":46,"status":8,"description":340,"domainCount":341,"ipCount":341,"signalCount":40,"firstSeen":342,"lastSeen":343},"tickron-exchange","Tickron Exchange","Crypto exchanges (coin* naming) fronted by a live BTC\u002FUSDT price ticker.",9,"2026-03-21T08:54:50.879Z","2026-08-05T22:47:43.341Z",{"slug":345,"name":346,"category":46,"status":8,"description":347,"domainCount":341,"ipCount":114,"signalCount":40,"firstSeen":348,"lastSeen":349},"codecoin-transfer","Codecoin Transfer","Crypto scam family built on a '[brand]coin codes, transfer assets quickly and for free' template (*coin naming).","2026-03-13T05:45:41.358Z","2026-05-05T10:21:02.544Z",{"slug":351,"name":352,"category":7,"status":8,"description":353,"domainCount":341,"ipCount":114,"signalCount":40,"firstSeen":354,"lastSeen":355},"cognivault-italia","Cognivault Italia","Italian-language fake AI trading platforms ('piattaforma di trading opera in modo più intelligente').","2026-03-24T23:21:19.622Z","2026-05-19T06:56:33.720Z",{"slug":357,"name":358,"category":7,"status":8,"description":359,"domainCount":341,"ipCount":328,"signalCount":67,"firstSeen":360,"lastSeen":361},"neqd-wealth-ring","Neqd Wealth Ring","Investment scam brand (neqd*) that also operates its OWN fake review \u002F 'is it a scam?' sites (.wiki 'tier S 4.9', -overview, -caution, -scam.com) to launder its reputation in search, the scam and its self-vouching review network share one operator.","2026-03-21T14:03:19.607Z","2026-07-20T16:59:16.195Z",{"slug":363,"name":364,"category":46,"status":8,"description":365,"domainCount":341,"ipCount":114,"signalCount":40,"firstSeen":366,"lastSeen":367},"zenith-official-markets","Zenith Official Markets","Multilingual (FR\u002FEN) trading scam kit posing as an 'official website 2026' that promises to 'trade smarter' (Hong-Kong themed).","2026-03-02T02:08:52.685Z","2026-09-01T04:25:16.296Z",{"slug":369,"name":370,"category":18,"status":8,"description":371,"domainCount":50,"ipCount":50,"signalCount":67,"firstSeen":372,"lastSeen":373},"quintia-5g","Quintia 5G","Italian mobile-themed scam kit ('5G 100%').","2026-03-26T04:51:21.924Z","2026-05-28T17:52:08.152Z",{"slug":375,"name":376,"category":7,"status":8,"description":377,"domainCount":50,"ipCount":191,"signalCount":76,"firstSeen":378,"lastSeen":379},"caldrex-investments","Caldrex Investments","Investment websites sharing reviewed variants of a blue trading-room landing page, centered investment copy and matching page sections. Grouped as a template family; common ownership is not established by the template alone.","2026-03-20T20:55:19.499Z","2026-08-04T02:30:45.153Z",{"slug":381,"name":382,"category":18,"status":8,"description":383,"domainCount":50,"ipCount":114,"signalCount":40,"firstSeen":384,"lastSeen":385},"kowloon-exchange-ring","Kowloon Exchange Ring","Typosquatting network impersonating Hong Kong crypto exchanges (hkee \u002F hkeex \u002F hkitb \u002F ganggujiao naming). Currently anti-bot-blocking scanners (403), template pending a reachable rescan.","2026-04-03T05:20:43.365Z","2026-08-25T14:22:50.708Z",{"slug":387,"name":388,"category":46,"status":8,"description":389,"domainCount":50,"ipCount":50,"signalCount":40,"firstSeen":390,"lastSeen":391},"greluna-exchange","Greluna Exchange","Greluna Exchange is an unregulated crypto-exchange scam (trust 1\u002F100, no FCA licence) run as an advance-fee \u002F pig-butchering scheme, fabricated balances and profits, then a 'withdrawal tax' to release funds that never arrive. Like the Neqd and Alithia networks, the SAME operator also runs Greluna's OWN fake review \u002F 'is it a scam?' sites (greluna-scam.review, -caution, -reviews, -overview, -inspect, .wiki) to flood search results and vouch for itself. Reported as part of the NEOD Wealth scam network.","2026-03-21T13:33:15.471Z","2026-06-05T04:52:30.479Z",{"slug":393,"name":394,"category":7,"status":8,"description":395,"domainCount":50,"ipCount":50,"signalCount":67,"firstSeen":396,"lastSeen":397},"cognivault-orient","Cognivault Orient","Fake 'AI-powered trading platform – official website' sites (EN\u002FIT\u002FFR\u002FNL\u002FJA dom variant #3 of the Cognivault family).","2026-04-01T07:31:51.201Z","2026-09-11T03:06:43.307Z",{"slug":399,"name":400,"category":46,"status":8,"description":401,"domainCount":50,"ipCount":114,"signalCount":67,"firstSeen":402,"lastSeen":403},"dexbit-collective","Dexbit Collective","Crypto exchange clones with *dex \u002F *bit naming (benadex, celibit, lopebit, niledex…).","2026-03-13T05:48:49.447Z","2026-05-05T09:56:20.073Z",{"slug":405,"name":406,"category":18,"status":8,"description":407,"domainCount":50,"ipCount":341,"signalCount":93,"firstSeen":408,"lastSeen":409},"goldbs-exchange","GoldBS Exchange","GoldBS Exchange (GoldBS Group Limited) is a fake crypto-investment platform run as a Ponzi: it lures victims with 5–10% 'guaranteed' returns, pays the first ones from new deposits to build trust, then blocks withdrawals once funded. Unregistered and unauthorised, the British Columbia Securities Commission added GoldBS Group Limited to its Investment Caution List (March 2026) and it appears on IOSCO's international investor-warning network; investors (notably in Pakistan) report failed withdrawals. The operator keeps spinning up new goldbs* domains as old ones get flagged or go offline.","2026-03-19T07:31:24.550Z","2026-07-20T16:58:52.049Z",{"slug":411,"name":412,"category":18,"status":8,"description":413,"domainCount":50,"ipCount":191,"signalCount":93,"firstSeen":414,"lastSeen":415},"alithia-reputation-ring","Alithia Reputation Ring","AI-investment scam brand (alithia*) using the same reputation-laundering kit as Neqd: the scam site plus self-run fake-review sites (.wiki 'tier S', -overview, -scam.com 'together against scams') that vouch for it.","2026-02-28T11:35:04.431Z","2026-03-19T13:46:17.494Z",{"slug":417,"name":418,"category":46,"status":8,"description":419,"domainCount":328,"ipCount":114,"signalCount":40,"firstSeen":420,"lastSeen":421},"easevault-exchange","Easevault Exchange","Clones built on the 'global cryptocurrency exchange making crypto trading easier' template.","2026-05-05T09:06:15.856Z","2026-05-05T10:31:44.270Z",{"slug":423,"name":424,"category":7,"status":8,"description":425,"domainCount":328,"ipCount":341,"signalCount":67,"firstSeen":426,"lastSeen":427},"tervalon-tracking","Tervalon Tracking","Websites grouped by an observed shared tracking identifier. Page designs vary; the identifier alone does not establish common ownership. Snyfer uses this codename to identify the technical group; it is not the name of a verified operator.","2026-05-01T08:31:13.332Z","2026-09-08T10:27:25.655Z",{"slug":429,"name":430,"category":18,"status":8,"description":431,"domainCount":328,"ipCount":121,"signalCount":40,"firstSeen":432,"lastSeen":433},"flandria-brokers","Flandria Brokers","Dutch\u002FBelgian broker scam kit (shared 'contactgegevens · copyrights © alle rechten' footer).","2026-04-24T06:36:10.969Z","2026-08-07T01:23:37.519Z",{"slug":435,"name":436,"category":46,"status":8,"description":437,"domainCount":328,"ipCount":191,"signalCount":93,"firstSeen":438,"lastSeen":439},"tradeogre-impersonators","TradeOgre Impersonators","Fake exchanges impersonating the real TradeOgre ('the original trusted crypto exchange' tagline).","2026-03-11T08:21:20.986Z","2026-04-30T00:11:42.183Z",{"slug":441,"name":442,"category":18,"status":8,"description":443,"domainCount":328,"ipCount":135,"signalCount":93,"firstSeen":444,"lastSeen":445},"pu-prime","PU Prime","PU Prime (Pacific Union, Seychelles), offshore forex\u002FCFD broker network carrying multiple regulator warnings (UK FCA, Philippines SEC cease-and-desist, Danish FSA, IOSCO I-SCAN) despite an Australian ASIC entity. Operates puprime* domains plus the sister brand gxgfx (shared GTM container); blocked-withdrawal complaints.","2026-03-28T05:23:45.411Z","2026-06-05T05:00:34.526Z",{"slug":447,"name":448,"category":46,"status":8,"description":449,"domainCount":328,"ipCount":328,"signalCount":67,"firstSeen":450,"lastSeen":451},"sisvida-exchange","Sisvida Exchange","Sisvida Exchange is a fake crypto-exchange scam posing as a 'leading global platform established 2019' (cold\u002Fhot-wallet separation, multi-signature, AI monitoring marketing). It shows fabricated balances and profits, then blocks withdrawals behind escalating fees and 'compliance' demands. Like the Greluna, Neqd and Alithia networks, the SAME operator also runs Sisvida's own fake review \u002F 'is it a scam?' sites (sisvida-scam.com, -caution, -overview, -reviews, .wiki) to dominate search results and vouch for itself. Not yet on the FCA\u002FDFPI\u002FCFTC lists but carries the universal exchange-scam withdrawal-obstruction signature.","2026-03-21T14:21:22.750Z","2026-07-30T13:58:17.944Z",{"slug":453,"name":454,"category":7,"status":8,"description":455,"domainCount":328,"ipCount":328,"signalCount":67,"firstSeen":456,"lastSeen":457},"cognivault-prime","Cognivault Prime","Fake 'AI-powered trading platform | official website' sites (IT\u002FEN\u002FFR dom variant #1 of the Cognivault family).","2026-03-24T20:41:29.967Z","2026-09-11T03:24:45.966Z",{"slug":459,"name":460,"category":7,"status":8,"description":461,"domainCount":328,"ipCount":328,"signalCount":67,"firstSeen":462,"lastSeen":463},"volkov-brokers","Volkov Brokers","Russian-language broker scam kit ('о компании · лицензии · рынки').","2026-04-11T06:16:44.877Z","2026-04-24T01:51:11.711Z",{"slug":465,"name":466,"category":7,"status":8,"description":467,"domainCount":114,"ipCount":67,"signalCount":76,"firstSeen":468,"lastSeen":469},"verdemark-platforms","Verdemark Platforms","Fake investment\u002Ftrading platform kit with a 'Platform [Brand]' hero over a purple-green world-map background and a 'Sign up now \u002F Register now' form, used across several brands (Roca Crescore, Spot Exelon Xp, Aramco America Invest, Skywon FX). Collects sign-ups, shows fabricated balances, then blocks withdrawals.","2026-04-01T03:20:32.249Z","2026-08-25T14:32:52.864Z",{"slug":471,"name":472,"category":18,"status":8,"description":473,"domainCount":114,"ipCount":135,"signalCount":93,"firstSeen":474,"lastSeen":475},"scancode-wallet","Scancode Wallet","Crypto scam kit using a 'scan the QR code to open' wallet gateway.","2026-04-07T08:21:05.315Z","2026-06-27T14:22:08.811Z",{"slug":477,"name":478,"category":18,"status":8,"description":479,"domainCount":114,"ipCount":135,"signalCount":93,"firstSeen":480,"lastSeen":481},"tofro-exchange","Tofro Exchange","Tofro Exchange is an unlicensed crypto-exchange\u002Fbroker scam: victims report deposits they can never withdraw (ignored withdrawal requests, failed recovery) and a 1\u002F100 trust score. It is blacklisted by the Bank of Lithuania (not authorised) and warned by the Netherlands' AFM (March 2025) as a likely boiler-room operation; it holds no top-tier licence (FCA, etc.). The operator keeps spinning up tofro* domains (.com\u002F.me\u002F.pro\u002F.global\u002F-usa) as older ones get flagged.","2026-04-10T14:42:39.046Z","2026-06-05T05:10:18.294Z",{"slug":483,"name":484,"category":46,"status":8,"description":485,"domainCount":114,"ipCount":341,"signalCount":40,"firstSeen":486,"lastSeen":487},"oryntha-trading","Oryntha Trading","Trading landing pages grouped by historical DOM variants, including the 934-euro and phone-form layouts. This group remains separate from the BeInveron and Italian template groups. Snyfer uses this codename to identify the technical group; it is not the name of a verified operator.","2026-07-05T00:15:46.586Z","2026-08-25T05:43:27.953Z",{"slug":489,"name":490,"category":46,"status":8,"description":491,"domainCount":114,"ipCount":135,"signalCount":67,"firstSeen":492,"lastSeen":493},"swapora-exchange","Swapora Exchange","Crypto exchanges built on a 'markets · swap quick conversion · zero trading fees' template.","2026-03-21T16:48:07.585Z","2026-05-05T10:02:26.640Z",{"slug":495,"name":496,"category":18,"status":8,"description":497,"domainCount":114,"ipCount":114,"signalCount":67,"firstSeen":498,"lastSeen":499},"capital-finex-markets","Capital Finex Markets","Unregulated forex broker scam (capitalfinexmarkets, capitalpayinc) in the 'Finex' broker-scam family known for fake offshore regulation (Vanuatu \u002F SVG \u002F Mauritius) and forged licenses; the domains currently serve an empty LiteSpeed directory listing.","2026-05-13T08:46:17.506Z","2026-08-25T14:02:41.701Z",{"slug":501,"name":502,"category":46,"status":8,"description":503,"domainCount":114,"ipCount":135,"signalCount":67,"firstSeen":504,"lastSeen":505},"optigame-spot","Optigame Spot","Gamified trading scam ('invite · spot · swap · option game').","2026-04-07T20:26:47.824Z","2026-04-30T19:05:45.241Z",{"slug":507,"name":508,"category":7,"status":8,"description":509,"domainCount":114,"ipCount":114,"signalCount":93,"firstSeen":510,"lastSeen":511},"neruvant-tracking","Neruvant Tracking","Websites grouped by observed tracking identifiers. A widely reused identifier also appears in other groups, so this association is ambiguous and requires further review. Snyfer uses this codename to identify the technical group; it is not the name of a verified operator.","2026-06-04T06:26:37.252Z","2026-06-06T06:56:03.003Z",{"slug":513,"name":514,"category":46,"status":8,"description":515,"domainCount":114,"ipCount":114,"signalCount":67,"firstSeen":516,"lastSeen":517},"drainmint-mining","Drainmint Mining","Fake mining dapps prompting 'connect wallet', wallet-drainer pattern.","2026-04-14T18:12:03.010Z","2026-07-29T02:54:46.932Z",{"slug":519,"name":520,"category":46,"status":8,"description":521,"domainCount":114,"ipCount":341,"signalCount":40,"firstSeen":522,"lastSeen":523},"sibex-forex","Sibex Forex","Russian forex scam kit built on a '1 month, no commission' offer (.pro domains).","2026-04-11T08:28:26.591Z","2026-09-10T09:44:31.808Z",{"slug":525,"name":526,"category":46,"status":8,"description":527,"domainCount":114,"ipCount":135,"signalCount":40,"firstSeen":528,"lastSeen":529},"gardanbit-network","GardanBit Network","Crypto-exchange clone family using *bit \u002F *crypt naming (bretebit, gardanbit, grantabit, malenbit, metbitex, portecrypt) built on one shared 'The most secure trading platform in the world' template with a fake mobile-app portfolio mockup and a staking \u002F swap \u002F P2P \u002F buy-crypto nav. Markets competitive fees, then shows fabricated balances and blocks withdrawals.","2026-03-11T08:10:33.399Z","2026-03-11T08:33:19.624Z",{"slug":531,"name":532,"category":18,"status":8,"description":533,"domainCount":114,"ipCount":135,"signalCount":40,"firstSeen":534,"lastSeen":535},"eurovest-ai-ring","EuroVest AI Ring","Multi-country (Spain \u002F France \u002F Italy) AI-trading scam network using 'AI' and 'invest' branding plus Elon-Musk celebrity-bait sites (e.g. elonmuskaitrading.com). It hypes automated AI profits, then blocks withdrawals; the sites hide behind Cloudflare's WAF.","2026-03-24T18:11:32.435Z","2026-05-07T03:31:23.601Z",{"slug":537,"name":538,"category":46,"status":8,"description":539,"domainCount":114,"ipCount":121,"signalCount":76,"firstSeen":540,"lastSeen":541},"autotrade-presale-ring","Autotrade Presale Ring","Six grok*-named crypto presale sites (grokvantage, grokvantis, grokvitrium, groklorum, grokprox, grokarium) each selling a 'GROK' token said to power xAI Grok integrations, an 'Autotrade AI reward engine' and AI marketplace payments, with up to 200% bonus tokens and a $500 minimum entry. The page copy differs per site, but all six run the same tawk.to live-chat account and three share one favicon, one operator behind six brands. Not affiliated with xAI.","2026-04-27T06:17:53.320Z","2026-08-21T07:22:49.831Z",{"slug":543,"name":544,"category":7,"status":8,"description":545,"domainCount":191,"ipCount":50,"signalCount":67,"firstSeen":546,"lastSeen":547},"equitros-trading","Equitros Trading","Broker scam built on a shared 'create trading account \u002F sign in' login template (equitros, knightpips).","2026-03-08T04:25:13.778Z","2026-09-08T14:55:40.072Z",{"slug":549,"name":550,"category":46,"status":8,"description":551,"domainCount":191,"ipCount":191,"signalCount":67,"firstSeen":552,"lastSeen":553},"vaultex-dex","Vaultex DEX","Crypto exchange clones built on a '[brand] exchange, secure crypto trading platform' template (*dex\u002F*bit naming).","2026-03-19T06:45:32.684Z","2026-05-01T20:51:49.983Z",{"slug":555,"name":556,"category":46,"status":8,"description":557,"domainCount":191,"ipCount":135,"signalCount":40,"firstSeen":558,"lastSeen":559},"cevrion-crypto","Cevrion Crypto","Cryptocurrency landing pages sharing the Invest Smarter, Not Harder layout and a DOM fingerprint. Snyfer uses this codename to identify the technical group; it is not the name of a verified operator.","2026-06-05T19:07:25.567Z","2026-07-03T04:39:44.261Z",{"slug":561,"name":562,"category":7,"status":8,"description":563,"domainCount":191,"ipCount":191,"signalCount":67,"firstSeen":564,"lastSeen":565},"cognivault-sur","Cognivault Sur","Fake 'plataforma de trading con IA – sitio web oficial' sites (ES\u002FFR\u002FSK dom variant #4 of the Cognivault family).","2026-04-16T06:36:20.701Z","2026-08-23T05:09:44.863Z",{"slug":567,"name":568,"category":18,"status":8,"description":569,"domainCount":191,"ipCount":191,"signalCount":76,"firstSeen":570,"lastSeen":571},"averquill-tracking","Averquill Tracking","Websites grouped by historical tracking identifiers. Current page content varies, and the tracking association requires further review. Snyfer uses this codename to identify the technical group; it is not the name of a verified operator.","2026-03-28T05:01:11.598Z","2026-07-30T01:28:14.399Z",{"slug":573,"name":574,"category":46,"status":8,"description":575,"domainCount":191,"ipCount":191,"signalCount":93,"firstSeen":576,"lastSeen":577},"yieldon-ai","Yieldon AI","AI-trading \u002F yield scam kit ('strategy · performance · security · risks', automated bots).","2026-04-01T08:40:34.373Z","2026-07-04T01:30:10.895Z",{"slug":579,"name":580,"category":46,"status":8,"description":581,"domainCount":191,"ipCount":135,"signalCount":93,"firstSeen":582,"lastSeen":583},"assetlyx-capital","Assetlyx Capital","EU-focused scam kit built on a 'manage, analyze and optimize your crypto assets' template.","2026-04-10T04:41:27.638Z","2026-04-27T13:06:33.007Z",{"slug":585,"name":586,"category":18,"status":8,"description":587,"domainCount":191,"ipCount":191,"signalCount":67,"firstSeen":588,"lastSeen":589},"vstsa-exchange","VSTSA Exchange","VSTSA is a 'click-a-button' app Ponzi: promoters feed bogus 'trading signals' into an app where clicking a button does nothing, it simply recycles new USDT deposits to pay earlier investors. No real product or service, only promoter membership. Same click-a-button family as Grokr, Orbis Exchange and MTS Foundation; the site's source code is in Chinese and a sister domain (99w.one) defaults to Vietnamese (China\u002FVietnam ties). Uses vstsa* domains.","2026-06-05T03:09:10.065Z","2026-06-05T05:14:40.717Z",{"slug":591,"name":592,"category":46,"status":8,"description":593,"domainCount":135,"ipCount":191,"signalCount":67,"firstSeen":594,"lastSeen":595},"flashtrade-exchange","Flashtrade Exchange","Crypto exchange kit built on a 'trade in a second · buy crypto express · Visa\u002FMastercard' template.","2026-04-06T16:20:48.107Z","2026-08-06T02:12:08.377Z",{"slug":597,"name":598,"category":46,"status":8,"description":599,"domainCount":135,"ipCount":135,"signalCount":40,"firstSeen":600,"lastSeen":601},"pelvanta-exchange","Pelvanta Exchange","Digital-asset trading pages sharing a DOM fingerprint, market ticker and quick-buying interface. Snyfer uses this codename to identify the technical group; it is not the name of a verified operator.","2026-05-01T12:55:31.146Z","2026-07-22T06:31:43.421Z",{"slug":603,"name":604,"category":18,"status":8,"description":605,"domainCount":135,"ipCount":40,"signalCount":76,"firstSeen":606,"lastSeen":607},"crescent-pip-brokers","Crescent Pip Brokers","Small forex broker scam cluster built on a shared site template promising guaranteed FX profits via personal account managers before locking deposits, with operators reportedly using fake first names. Both domains now return 404 and appear defunct.","2026-04-21T03:07:10.522Z","2026-07-05T01:50:42.010Z",{"slug":609,"name":610,"category":46,"status":8,"description":611,"domainCount":135,"ipCount":191,"signalCount":93,"firstSeen":612,"lastSeen":613},"portfora-exchange","Portfora Exchange","Fake crypto-exchange kit with a rotating hero ('Achieve financial freedom' · 'Start your token journey' · 'Build your crypto portfolio') above a live price-ticker table, used across several brands (moalawallet, zozotrade, dravan, Sisvida). Distinct from Portfolex Builders (#75). Shows fabricated balances\u002Fprofits then blocks withdrawals.","2026-03-21T14:01:06.072Z","2026-08-03T01:21:25.802Z",{"slug":615,"name":616,"category":18,"status":8,"description":617,"domainCount":135,"ipCount":135,"signalCount":93,"firstSeen":618,"lastSeen":619},"orvanta-casino","Orvanta Casino","Casino websites sharing the reviewed 'Stay Untamed' signup template, Zeus illustration, bonus section and page layout. Shared template evidence does not by itself establish common ownership.","2026-05-04T15:09:29.314Z","2026-07-31T01:57:04.002Z",{"slug":621,"name":622,"category":7,"status":8,"description":623,"domainCount":135,"ipCount":191,"signalCount":67,"firstSeen":624,"lastSeen":625},"pentafold-invest","Pentafold Invest","Multi-product HYIP\u002Finvestment scam kit bundling forex, binary options, real estate, crypto-mining and bitcoin investing on one shared template.","2026-04-06T09:53:05.670Z","2026-07-26T02:59:24.565Z",{"slug":627,"name":628,"category":18,"status":8,"description":629,"domainCount":135,"ipCount":191,"signalCount":67,"firstSeen":630,"lastSeen":631},"lunar-mint-syndicate","Lunar Mint Syndicate","Cluster of fake crypto operations spanning a bogus US Bitcoin-mining platform, an MEXC impersonation site, a yield-farming DeFi protocol that rug-pulled in mid-2025, and an AI crypto-trading exchange, all using deposit-then-block-withdrawal and advance-fee tactics. All four domains now return 404 or fail to resolve and appear defunct.","2026-04-07T15:49:23.832Z","2026-08-06T02:05:13.733Z",{"slug":633,"name":634,"category":7,"status":8,"description":635,"domainCount":135,"ipCount":191,"signalCount":40,"firstSeen":636,"lastSeen":637},"nordvex-ai","Nordvex AI","Finnish-language AI-trading scam network built on one shared template, '[Brand], #1 tekoälykaupankäyntialusta (AI trading platform), trusted by 50,000+ investors worldwide' with a 'Top Traders of the Month' leaderboard. Uses invented brand names (Brekutios, Kruvestal, Murvoxit, Senvix) on -official .co.uk\u002F.org domains, targeting Finnish investors with fabricated profits before blocking withdrawals. Kruvestal is already flagged as suspicious; check the FIN-FSA warning list.","2026-04-30T06:21:46.998Z","2026-05-11T17:02:14.317Z",{"slug":639,"name":640,"category":18,"status":8,"description":641,"domainCount":135,"ipCount":67,"signalCount":40,"firstSeen":642,"lastSeen":643},"talvuron-pages","Talvuron Pages","Pages grouped by matching content and DOM fingerprints. Limited captured content requires further review before drawing conclusions about their relationship. Snyfer uses this codename to identify the technical group; it is not the name of a verified operator.","2026-08-02T01:45:26.171Z","2026-08-25T15:01:15.673Z",{"slug":645,"name":646,"category":18,"status":8,"description":647,"domainCount":135,"ipCount":135,"signalCount":67,"firstSeen":648,"lastSeen":649},"matignon-brokers","Matignon Brokers","French-language broker scam built on a shared login template ('se connecter · mot de passe · rester connecté'), across several brands (groupsecuritiesdublin, interface-arbitragecrypto, matignondeveloppement2).","2026-03-22T10:00:03.827Z","2026-07-02T03:50:33.416Z",{"slug":651,"name":652,"category":7,"status":8,"description":653,"domainCount":135,"ipCount":135,"signalCount":67,"firstSeen":654,"lastSeen":655},"omnitrade-platform","Omnitrade Platform","Trading scam kit built on an 'access to all trading platforms · trade across mobile, web and desktop' template.","2026-04-29T02:36:33.515Z","2026-05-14T00:45:54.835Z",{"slug":657,"name":658,"category":46,"status":8,"description":659,"domainCount":135,"ipCount":114,"signalCount":40,"firstSeen":660,"lastSeen":661},"frt-exchange-ring","FRT Exchange Ring","Single-operator fake crypto-exchange family using the frt* naming pattern (frtexc, frtexx, frtsss, frtvip) on one shared DOM template. No public reporting yet, characterized by the shared template plus sequential brandless domains; carries the universal exchange-scam withdrawal-obstruction signature.","2026-04-08T00:46:18.758Z","2026-04-22T22:10:36.913Z",{"slug":663,"name":664,"category":7,"status":8,"description":665,"domainCount":135,"ipCount":191,"signalCount":93,"firstSeen":666,"lastSeen":667},"nightdesk-trading","Nightdesk Trading","Fake online trading-platform scam kit fronted by a dark 'sign in \u002F Welcome Back' dashboard login across several brands (Algo X Trading, Motion Global Asset, Bitspectrex, Brokado Market). Victims are shown a fabricated balance and live positions, then withdrawals are blocked behind 'fees'.","2026-04-26T07:18:26.179Z","2026-08-04T02:08:59.517Z",{"slug":669,"name":670,"category":18,"status":8,"description":671,"domainCount":135,"ipCount":67,"signalCount":93,"firstSeen":672,"lastSeen":673},"okoex-exchange","Okoex Exchange","Okoex is a fake crypto exchange that mimics the well-known OKX brand to borrow legitimacy, part of the regulator-warned, TXEX-style fraud-platform network. It lures users with high advertised returns and referral bonuses, then freezes accounts and blocks withdrawals behind fees. The platform is now largely defunct.","2026-04-10T10:07:08.328Z","2026-04-10T11:56:23.380Z",{"slug":675,"name":676,"category":18,"status":8,"description":677,"domainCount":135,"ipCount":191,"signalCount":93,"firstSeen":678,"lastSeen":679},"multiply-investments","Multiply Investments","'Multiply' HYIP investment kit across two generations (invstechnet\u002Ftechinvssmart + invsjadecptl\u002Fkslimitedinv), same 'Multiply' branding, multiple dom variants.","2026-04-11T12:17:03.004Z","2026-05-12T06:56:38.137Z",{"slug":681,"name":682,"category":46,"status":8,"description":683,"domainCount":135,"ipCount":135,"signalCount":67,"firstSeen":684,"lastSeen":685},"demetrix-exchange","Demetrix Exchange","Fake crypto exchange with an affiliate program and live coin prices (demetrixcoins, flofince).","2026-04-06T05:52:27.912Z","2026-04-29T11:31:26.681Z",{"slug":687,"name":688,"category":7,"status":8,"description":689,"domainCount":135,"ipCount":76,"signalCount":93,"firstSeen":690,"lastSeen":691},"goa-satta","Goa Satta","Indian 'Satta Matka' gambling network (Goa Satta) (goasatta, isladova, goa-satta.info, remnar-tech).","2026-04-30T06:31:05.660Z","2026-05-12T05:21:49.924Z",{"slug":693,"name":694,"category":7,"status":8,"description":695,"domainCount":135,"ipCount":40,"signalCount":40,"firstSeen":696,"lastSeen":697},"automa-ai-investimenti","Automa AI Investimenti","Italian-language scam kit built on an 'automated AI investment platform for stocks & crypto' template ('piattaforma di investimento automatizzata basata su IA'). Part of a larger Italian AI-investment operator.","2026-03-24T20:41:59.032Z","2026-04-10T04:51:18.694Z",{"slug":699,"name":700,"category":46,"status":8,"description":701,"domainCount":76,"ipCount":40,"signalCount":40,"firstSeen":702,"lastSeen":703},"trustmass-exchange","Trustmass Exchange","Fake crypto-exchange kit fronted by huge fake social proof ('289,966,330 USERS TRUST US', 'Why Choose Binunz?'), used across brands (Binunz, Bittfux). A deposit-lock scam: after depositing, victims can't withdraw and are pushed to 'deposit more to unlock'. Trustpilot is full of scam complaints; sibling MyBinunz.com is a documented scam.","2026-04-29T14:46:38.855Z","2026-06-05T04:42:18.057Z",{"slug":705,"name":706,"category":18,"status":8,"description":707,"domainCount":76,"ipCount":191,"signalCount":93,"firstSeen":708,"lastSeen":709},"teutonic-sportsbook","Teutonic Sportsbook","Cloned German-language sportsbook\u002Fbetting sites (shared 'startseite · produkte · sport · ergebnisse · wettverlauf' nav).","2026-03-10T14:04:49.185Z","2026-09-09T06:33:08.369Z",{"slug":711,"name":712,"category":46,"status":8,"description":713,"domainCount":76,"ipCount":76,"signalCount":40,"firstSeen":714,"lastSeen":715},"parixo-network","Parixo Network","Owner-grouped scam network (zinderix, tuoparix, miloky) using short brandable '-ix\u002F-ky' names. Pages are JS-rendered \u002F blank at scan time and there is no public reporting yet, exact theme and template PENDING a rendered-HTML rescan to characterize. Grouped by the owner as the same operator.","2026-06-05T03:09:10.473Z","2026-06-05T05:15:31.035Z",{"slug":717,"name":718,"category":18,"status":8,"description":719,"domainCount":76,"ipCount":40,"signalCount":67,"firstSeen":720,"lastSeen":721},"clockshell-network","Clockshell Network","JS-rendered scam sites sharing one page shell (short Asian-style code domains); the rendered template is hidden behind JS, pending a rendered-HTML rescan to characterize (likely casino\u002Fexchange).","2026-05-08T13:57:51.893Z","2026-05-08T14:08:56.011Z",{"slug":723,"name":724,"category":7,"status":8,"description":725,"domainCount":76,"ipCount":40,"signalCount":67,"firstSeen":726,"lastSeen":727},"ghostport-brokers","Ghostport Brokers","Shared broker login-portal template; some use Cyrillic look-alike characters to evade filters.","2026-04-06T13:41:12.941Z","2026-04-26T02:12:04.064Z",{"slug":729,"name":730,"category":18,"status":8,"description":731,"domainCount":76,"ipCount":76,"signalCount":76,"firstSeen":732,"lastSeen":733},"veyrune-pages","Veyrune Pages","Pages with matching content and DOM fingerprints showing Where Winds Meet game content in stored captures. Shared or redirected third-party content does not establish common ownership. Snyfer uses this codename to identify the technical group; it is not the name of a verified operator.","2026-07-02T06:55:04.988Z","2026-08-07T00:47:52.466Z",{"slug":735,"name":736,"category":7,"status":8,"description":737,"domainCount":76,"ipCount":76,"signalCount":40,"firstSeen":738,"lastSeen":739},"elarvyn-trading","Elarvyn Trading","Trading registration pages sharing a DOM fingerprint, initial-deposit instructions and algorithm marketing sections. Snyfer uses this codename to identify the technical group; it is not the name of a verified operator.","2026-08-28T05:33:07.972Z","2026-08-28T06:35:10.897Z",{"slug":741,"name":742,"category":18,"status":8,"description":743,"domainCount":76,"ipCount":40,"signalCount":67,"firstSeen":744,"lastSeen":745},"creatorcoy-contracts","CreatorCoy Contracts","Crypto 'contracts \u002F market' scam family using the creatorcoy* naming pattern.","2026-03-21T04:56:29.568Z","2026-04-25T08:06:17.684Z",{"slug":747,"name":748,"category":7,"status":8,"description":749,"domainCount":76,"ipCount":135,"signalCount":93,"firstSeen":750,"lastSeen":751},"truvesta-consulting-ring","Truvesta Consulting Ring","Investment-'consulting' kit built on one template, 'Truly ideal solutions for your financial growth · Helping clients attain new possibilities · Better investment, Better Results', under AgroChainExperts and Desuch Digital Assets, plus the German-language Prime Finance Limited whose scan text is poisoned by a GTranslate widget. One shared tawk.to support account.","2026-03-19T04:12:41.894Z","2026-08-21T08:16:45.763Z",{"slug":753,"name":754,"category":46,"status":8,"description":755,"domainCount":76,"ipCount":76,"signalCount":67,"firstSeen":756,"lastSeen":757},"helix-vault-exchange","Helix Vault Exchange","Fake crypto-exchange cluster marketed as digital-asset trading and staking platforms, with dckex.com documented as a pig-butchering-linked fraud using simulated order books, fake staking rewards and withdrawal-tax extortion, while fynor.com draws unwithdrawable-funds complaints. Both domains remain up behind Cloudflare.","2026-04-25T10:06:25.919Z","2026-07-21T10:36:38.266Z",{"slug":759,"name":760,"category":46,"status":8,"description":761,"domainCount":76,"ipCount":76,"signalCount":67,"firstSeen":762,"lastSeen":763},"liquibox-exchange","Liquibox Exchange","Crypto-exchange scam kit built on a 'liquidity boosting platform, turn your tokens into more' theme; sites share one operator's live-chat fingerprint.","2026-03-05T02:43:16.889Z","2026-05-05T08:55:58.566Z",{"slug":765,"name":766,"category":18,"status":8,"description":767,"domainCount":76,"ipCount":76,"signalCount":40,"firstSeen":768,"lastSeen":769},"vjc-group","VJC Group","Owner-grouped pair (vjc.cc, wjnos) sharing a DOM\u002Fcontent template; scan text empty, exact theme pending a rescan.","2026-04-30T17:51:44.070Z","2026-07-30T03:04:01.654Z",{"slug":771,"name":772,"category":18,"status":8,"description":773,"domainCount":76,"ipCount":40,"signalCount":93,"firstSeen":774,"lastSeen":775},"profitia-network","Profitia Network","Russian-language crypto\u002Finvestment (HYIP-style) scam that rotates domains: the pages now show a 'our domain has changed, click to go to the new website' redirect notice. Uses profitia* and maxprof domains; consistent with the standardized scam-toolkit campaigns that mass-produce HYIP investment sites.","2026-04-11T10:46:19.934Z","2026-06-05T04:59:16.856Z",{"slug":777,"name":778,"category":46,"status":8,"description":779,"domainCount":76,"ipCount":135,"signalCount":40,"firstSeen":780,"lastSeen":781},"orbit-exchange","Orbit Exchange","Fake crypto exchange built on a shared template with a live price ticker and C2C \u002F pledge \u002F deposit features (crypto-orbit, cryptoorbit-web).","2026-04-17T02:44:14.484Z","2026-04-22T11:42:13.405Z",{"slug":783,"name":784,"category":18,"status":8,"description":785,"domainCount":76,"ipCount":76,"signalCount":93,"firstSeen":786,"lastSeen":787},"astervex-multi-asset","Astervex Multi-Asset","Multi-asset (stocks \u002F crypto \u002F ETF \u002F indices) trading scam kit using versioned -v2\u002F-v3 domains.","2026-04-21T06:32:09.846Z","2026-08-25T14:31:04.653Z",{"slug":789,"name":790,"category":46,"status":8,"description":791,"domainCount":76,"ipCount":40,"signalCount":40,"firstSeen":792,"lastSeen":793},"dep-private-access","DEP Private Access","Crypto scam kit (dep* naming) with a 'only uses .com\u002F.org\u002F.net, other extensions are fraudulent' private-access banner.","2026-04-22T13:30:41.883Z","2026-04-22T13:32:50.749Z",{"slug":795,"name":796,"category":46,"status":8,"description":797,"domainCount":76,"ipCount":76,"signalCount":76,"firstSeen":798,"lastSeen":799},"portfolex-builders","Portfolex Builders","Crypto\u002Fforex scam kit built on a 'create your cryptocurrency portfolio today' template.","2026-03-13T05:50:58.956Z","2026-05-05T10:10:46.750Z",{"slug":801,"name":802,"category":7,"status":8,"description":803,"domainCount":76,"ipCount":67,"signalCount":93,"firstSeen":804,"lastSeen":805},"chainvault-network","Chainvault Network","Crypto scam kit built on a '[brand] is a decentralised public blockchain' template.","2026-04-15T06:36:14.243Z","2026-04-15T06:37:18.089Z",{"slug":807,"name":808,"category":7,"status":8,"description":809,"domainCount":76,"ipCount":76,"signalCount":67,"firstSeen":810,"lastSeen":811},"nullcomm-cfd","Nullcomm CFD","Share\u002FCFD broker scam kit built on a 'trade your favourite shares and CDFs · zero commission' template.","2026-03-25T06:31:06.621Z","2026-08-06T00:23:52.582Z",{"slug":813,"name":814,"category":18,"status":8,"description":815,"domainCount":76,"ipCount":76,"signalCount":67,"firstSeen":816,"lastSeen":817},"crestfx-options","Crestfx Options","Forex \u002F binary-option trading scam built on a shared template (profitablefxoptiontrade.info, crestmdigital.com). Promotes 'profitable' fx\u002Foption trading with fabricated results; unregistered, with the usual deposit-then-blocked-withdrawal pattern.","2026-04-29T07:36:52.947Z","2026-07-25T01:55:55.249Z",{"slug":819,"name":820,"category":7,"status":8,"description":821,"domainCount":76,"ipCount":40,"signalCount":93,"firstSeen":822,"lastSeen":823},"defaultbar-traders","Defaultbar Traders","Trading scam kit shipping an un-edited default announcement bar + 'trading tools and analysis'.","2026-05-01T18:45:26.836Z","2026-05-13T20:36:13.591Z",{"slug":825,"name":826,"category":18,"status":8,"description":827,"domainCount":76,"ipCount":67,"signalCount":67,"firstSeen":828,"lastSeen":829},"ferrolode-exchange","Ferrolode Exchange","Crypto-exchange impersonation cluster where mxcoin.com mimicked the real MEXC \u002F mxc.com brand and tradingbloom.com operated as an unlicensed CFD and forex broker blacklisted by regulators in the Netherlands, Belgium, Italy, Estonia and Canada. Both domains now display domain-for-sale parking pages and the operation appears defunct.","2026-03-19T07:34:40.233Z","2026-08-02T00:14:52.758Z",{"slug":831,"name":832,"category":18,"status":8,"description":833,"domainCount":76,"ipCount":76,"signalCount":40,"firstSeen":834,"lastSeen":835},"seravune-gateway","Seravune Gateway","Pages sharing an Environment Safe entry screen and matching content and DOM fingerprints. A generic entry screen is weak evidence of an operator relationship. Snyfer uses this codename to identify the technical group; it is not the name of a verified operator.","2026-07-10T00:39:22.074Z","2026-07-31T00:19:47.663Z",{"slug":837,"name":838,"category":7,"status":8,"description":839,"domainCount":76,"ipCount":135,"signalCount":40,"firstSeen":840,"lastSeen":841},"bullmask-brokers","Bullmask Brokers","Pair of broker sites (blackbull.com, gainlit.com) sharing the same Google Analytics and GTM container, which points to common operation, likely one operator running two sites. blackbull.com is BlackBull Markets, a broker regulated in New Zealand and Seychelles; an earlier UK FCA warning was later withdrawn by the FCA. gainlit.com reuses the same analytics tags.","2026-04-23T03:32:44.292Z","2026-07-28T03:44:44.065Z",{"slug":843,"name":844,"category":7,"status":8,"description":845,"domainCount":76,"ipCount":67,"signalCount":93,"firstSeen":846,"lastSeen":847},"polyglot-investments","Polyglot Investments","Investment scam kit fronted by a large auto-translate language picker.","2026-04-26T13:11:39.288Z","2026-04-27T13:12:11.155Z",{"slug":849,"name":850,"category":18,"status":8,"description":851,"domainCount":76,"ipCount":191,"signalCount":93,"firstSeen":852,"lastSeen":853},"rubybex-exchange","Rubybex Exchange","Rubybex (rubybexdwq.com) is a multi-language crypto-futures exchange, futures, perpetuals, 'convert', markets and 'liquidity mining', from the TXEX-style fraud-platform network. It displays fabricated returns to keep victims depositing, then blocks withdrawals behind fees. The domains are now defunct.","2026-03-21T16:53:13.832Z","2026-06-18T11:58:27.612Z",{"slug":855,"name":856,"category":7,"status":8,"description":857,"domainCount":76,"ipCount":67,"signalCount":67,"firstSeen":858,"lastSeen":859},"evergreen-estate-trust","Evergreen Estate Trust","Two near-identical multi-asset HYIP sites sharing the same Growing Wealth for Future Generations template, marketing fake crypto, forex, gold, oil and real-estate investment plans with implausible guaranteed returns of 80 to 555 percent over days. Both sites are still up and flagged with very low trust scores and shared-server scam clustering.","2026-05-13T03:02:28.837Z","2026-08-06T02:46:16.147Z",{"slug":861,"name":862,"category":7,"status":8,"description":863,"domainCount":76,"ipCount":191,"signalCount":76,"firstSeen":864,"lastSeen":865},"valquorin-markets","Valquorin Markets","Broker pages sharing DOM and tracking evidence and displaying VT Markets branding. This record describes technical matches; it is not a finding of fraud or an independent verification of ownership. Snyfer uses this codename to identify the technical group; it is not the name of a verified operator.","2026-03-24T17:11:29.737Z","2026-07-27T02:36:16.800Z",{"slug":867,"name":868,"category":7,"status":8,"description":869,"domainCount":76,"ipCount":40,"signalCount":67,"firstSeen":870,"lastSeen":871},"quantelune-portal","Quantelune Portal","Trading account login pages sharing content and DOM fingerprints and Italian login and registration copy. Snyfer uses this codename to identify the technical group; it is not the name of a verified operator.","2026-05-16T04:51:11.856Z","2026-07-26T02:51:02.371Z",{"slug":873,"name":874,"category":46,"status":8,"description":875,"domainCount":76,"ipCount":40,"signalCount":40,"firstSeen":876,"lastSeen":877},"sniperdrain-bots","Sniperdrain Bots","Fake 'AI sniper bot' crypto wallet-drainer sites impersonating the 'Viper AI Sniper' brand ('AI-Driven Precision For Every Snipe', Solana token-sniping). They prompt victims to connect a wallet or run code, then drain it. Flagged malicious by multiple AV engines (wallet-drainer); brand-new throwaway domains.","2026-04-06T14:01:54.576Z","2026-06-05T05:10:59.438Z",{"slug":879,"name":880,"category":7,"status":8,"description":881,"domainCount":76,"ipCount":76,"signalCount":67,"firstSeen":882,"lastSeen":883},"kervalon-exchange","Kervalon Exchange","Exchange login pages sharing a DOM fingerprint, futures navigation and account interface. Snyfer uses this codename to identify the technical group; it is not the name of a verified operator.","2026-03-13T06:10:01.887Z","2026-06-19T05:20:39.743Z",{"slug":885,"name":886,"category":46,"status":8,"description":887,"domainCount":76,"ipCount":76,"signalCount":67,"firstSeen":888,"lastSeen":889},"bitchange-money","BitChange Money","Crypto-investment scam family built on one shared 'Start Investing in Cryptocurrency · 0% trading commission' template fronted by fake Bloomberg, Forbes and New York Times endorsement logos (bit-change.money, cryptonext.ru, vablueway.com). Markets easy crypto buying\u002Fselling and staking, then shows fabricated balances and blocks withdrawals.","2026-03-11T08:18:38.582Z","2026-03-11T14:33:18.636Z",{"slug":891,"name":892,"category":7,"status":8,"description":893,"domainCount":76,"ipCount":114,"signalCount":67,"firstSeen":894,"lastSeen":895},"platinum-markets","Platinum Markets","Multi-asset broker scam template ('global markets at your fingertips · one account, unlimited opportunities') (platinum-finance, wirezee-ltd).","2026-03-30T06:30:33.410Z","2026-08-10T01:15:04.187Z",{"slug":897,"name":898,"category":7,"status":8,"description":899,"domainCount":76,"ipCount":76,"signalCount":40,"firstSeen":900,"lastSeen":901},"mirror-quant-collective","Mirror Quant Collective","Copy-trading and trading-signals scam ring marketing automated profit replication and charting tools across crypto, forex and stocks, with fabricated reviews and blocked withdrawals; procopytrade.com drew an FCA clone\u002Funauthorised-firm warning. All three domains are now offline and appear defunct.","2026-03-20T20:36:02.394Z","2026-05-16T07:01:52.947Z",{"slug":903,"name":904,"category":46,"status":8,"description":905,"domainCount":76,"ipCount":76,"signalCount":40,"firstSeen":906,"lastSeen":907},"brassveil-capital","Brassveil Capital","Pair of crypto investment and sell-buy-swap sites sharing one GTM container; maicapital1.com matches reported MAI Capital crypto-investment scams that solicit deposits via WhatsApp then freeze withdrawals. Both domains still resolve, with coatedf.cc serving a JavaScript redirect shell rather than visible content.","2026-04-07T04:31:57.062Z","2026-09-11T00:53:17.923Z",{"slug":909,"name":910,"category":7,"status":8,"description":911,"domainCount":76,"ipCount":135,"signalCount":40,"firstSeen":912,"lastSeen":913},"tidewave-brokers","Tidewave Brokers","Broker scam kit built on a 'navigate the markets · ride the waves of success' template.","2026-05-13T10:18:13.128Z","2026-07-18T13:40:57.441Z"]