In a post published October 21, 2026, MalwareTips warns that dartscornerstore[.]shop is a fake store built on a copied catalog. MalwareTips says the site was registered on March 16, 2026 and that its URL scanner gives…
MalwareTips reports in a post published October 21, 2026 that lacosteoutlets[.]us is a fake shop with a catalog copied from elsewhere. MalwareTips says the site was registered on April 30, 2026 and that its URL scanne…
In a post published October 21, 2026, MalwareTips warns that decathlonathletic[.]com is a fake copycat store. MalwareTips says the site was registered on October 20, 2026, one day before its review, that its URL scann…
MalwareTips reports in a post published October 21, 2026 that robuxclaimnow.blogspot[.]com poses as a free Robux generator. Visitors type a Roblox username, choose an amount and watch a fake progress bar, console mess…
In a post published October 21, 2026, MalwareTips warns of a Best Buy survey scam that uses the retailer's identity to promote a counterfeit reward page. The reported email invites feedback about store promotions and…
kikane.myridianprizes.com
Fake Best Buy survey / Samsung S26 Ultra prize page
MalwareTips reports in a post published October 21, 2026 on a Citi Debit Card Update email scam that claims the recipient's card has been added to a Bitcoin wallet and asks anyone who did not authorize it to review th…
login-citibank.replit.app
Fake Citi 'Debit Card Update' / Bitcoin wallet email lure
In two posts published October 21, 2026, MalwareTips warns that zulacsino[.]com and zulaasino[.]com are fake crypto casinos. Both were registered on October 17, 2026, and MalwareTips says each is built from the same s…
MalwareTips warns in two posts published October 21, 2026 that chumbacassino[.]com and chumbacasinoo[.]com are fake crypto casinos. Both were registered on October 17, 2026, and MalwareTips says each is built from the…
In three posts published October 21, 2026, MalwareTips warns that drafrkings[.]com, drattkings[.]com and draftkinfs[.]com are fake crypto casinos. All three were registered on October 17, 2026, and MalwareTips says ea…
drafrkings.com
Same kit: drattkings.com, draftkinfs.com (fake crypto casinos)
In a scam alert posted on its official X account on October 21, 2026, Parity Technologies said it had been made aware of a fraudulent website, parity-wallet[.]com, impersonating Parity Technologies and offering potent…
MalwareTips reports in a post published October 21, 2026 that a fake Migrate.fun scam uses lookalike token-migration interfaces to encourage wallet interaction. Reported addresses include myro-migration.pages[.]dev an…
myro-migration.pages.dev
Also reported: tokenmigrate.org (fake Migrate.fun token-migration pages)
In a post published October 21, 2026, MalwareTips warns that a fake HyENA trading platform used hyenea[.]trade, adding an extra 'e' compared with the real brand's historical address hyena.trade, and copied the platfor…
hyenea.trade
Lookalike of HyENA trading platform (real address hyena.trade)
MalwareTips reports in a post published October 21, 2026 that a fake Stacks sBTC rewards scam promoted a supposed Bitcoin reward program advertising returns up to 5%. The reported impersonation used buttholewinn.pages…
In a post published October 21, 2026, MalwareTips warns of a Tradecat airdrop scam promoting a supposed limited-time distribution for early adopters and community members. The reported claim site used register-tradeca…
MalwareTips reports in a post published October 21, 2026 that an Audius airdrop scam uses the lookalike site audius-eligibility[.]com to impersonate the music platform Audius. The page advertises a supposed retroactiv…
In a post published October 21, 2026, MalwareTips warns of a Merkl Rewards scam that impersonates Merkl, a real platform that distributes incentives across decentralized finance applications. The reported counterfeit…
app.claim-merkle.xyz
Fake Merkl rewards claim page (genuine app is app.merkl.xyz)
The Solicitors Regulation Authority (SRA) issued a scam alert on 21 October 2026 about a document and email sent about a supposed UK work visa application and offer of employment that misuse the name…
Mcdougalgregor@consultant.com
Alias 'Attorney McDougal Gregor' misusing Wesley Gryk Solicitors LLP's name
FOX 5 Atlanta reported on 21 October 2026 that a federal indictment alleges Roosevelt Tobias 'Toby' Bailey, 70, of Duluth, Georgia, ran two Ponzi schemes through his company, Borg Global, from October 2018 through Oct…
Company: Borg Global; defendants Roosevelt Tobias 'Toby' Bailey and Alvin Jones (charged, presumed innocent)
Security firm Huntress reported on 21 October 2026 that it investigated incidents, affecting at least three customers, from an Amazon-themed ClickFix campaign. The top sponsored Google result for the…
The Singapore Police Force warned on 21 October 2026 of an uptick in phishing scams impersonating telco SIMBA that appear among top sponsored results when people search Google for SIMBA top-up services. Since March 20…
On 21 October 2026, several Hong Kong banks issued statements about fraudulent websites impersonating their internet banking login pages, which the Hong Kong Monetary Authority (HKMA) listed in its scam alert the same…
carousell.shop-service.top
Fake Xiaohongshu account '创兴银行有限公司广州分行' (ID 18419804225)
Germany's Federal Financial Supervisory Authority (BaFin) warned on 21 October 2026 about offers on the website kalyptowave.net. According to BaFin's findings, the operators of the website are offering financial servi…
Germany's Federal Financial Supervisory Authority (BaFin) warned on 21 October 2026 about offers on the website captrader.group. BaFin suspects the unknown operators are offering financial services on the site without…
Germany's Federal Financial Supervisory Authority (BaFin) warned on 21 October 2026 about offers from the 'Mineral Resources Holdings and Commercial Investment Bureau', named in the warning with Berlin, on the website…
mraib.com
Name used: Mineral Resources Holdings and Commercial Investment Bureau, Berlin
Hong Kong's Securities and Futures Commission (SFC) added the website https://www.ruihengtech.com to its Alert List of suspicious websites on 21 October 2026. The SFC says the website is not associated with Ruiheng Se…
Hong Kong's Securities and Futures Commission (SFC) added the website https://www.phoenixcapitalhk.com to its Alert List of suspicious websites on 21 October 2026. The SFC says the website is not associated with Phoen…
The UK Financial Conduct Authority (FCA) published a clone firm warning on 21 October 2026 about 'GoTempCover Limited', which it says is not authorised by the FCA but has been contacting people pretending to be an aut…
gotempcover.com
support@gotempcover.com
Also uses website drivewisely.app; clone of FCA-authorised firm (FRN 207658)
The UK Financial Conduct Authority (FCA) added spacexcapitalsecuredinvestmentcompany.com to its Warning List on 21 October 2026, saying it is not authorised by the FCA, may be providing or promoting financial services…
The UK Financial Conduct Authority (FCA) added Acorn Property Invest to its Warning List on 21 October 2026, saying the firm is not authorised by the FCA, may be providing or promoting financial services or products w…
The UK Financial Conduct Authority (FCA) added Oribit X Trading FX to its Warning List on 21 October 2026, saying the firm is not authorised by the FCA, may be providing or promoting financial services or products wit…