In two posts published October 21, 2026, MalwareTips warns that zulacsino[.]com and zulaasino[.]com are fake crypto casinos. Both were registered on October 17, 2026, and MalwareTips says each is built from the same sโฆ
MalwareTips warns in two posts published October 21, 2026 that chumbacassino[.]com and chumbacasinoo[.]com are fake crypto casinos. Both were registered on October 17, 2026, and MalwareTips says each is built from theโฆ
In three posts published October 21, 2026, MalwareTips warns that drafrkings[.]com, drattkings[.]com and draftkinfs[.]com are fake crypto casinos. All three were registered on October 17, 2026, and MalwareTips says eaโฆ
drafrkings.com
Same kit: drattkings.com, draftkinfs.com (fake crypto casinos)
In a scam alert posted on its official X account on October 21, 2026, Parity Technologies said it had been made aware of a fraudulent website, parity-wallet[.]com, impersonating Parity Technologies and offering potentโฆ
MalwareTips reports in a post published October 21, 2026 that a fake Migrate.fun scam uses lookalike token-migration interfaces to encourage wallet interaction. Reported addresses include myro-migration.pages[.]dev anโฆ
myro-migration.pages.dev
Also reported: tokenmigrate.org (fake Migrate.fun token-migration pages)
In a post published October 21, 2026, MalwareTips warns that a fake HyENA trading platform used hyenea[.]trade, adding an extra 'e' compared with the real brand's historical address hyena.trade, and copied the platforโฆ
hyenea.trade
Lookalike of HyENA trading platform (real address hyena.trade)
MalwareTips reports in a post published October 21, 2026 that a fake Stacks sBTC rewards scam promoted a supposed Bitcoin reward program advertising returns up to 5%. The reported impersonation used buttholewinn.pagesโฆ
In a post published October 21, 2026, MalwareTips warns of a Tradecat airdrop scam promoting a supposed limited-time distribution for early adopters and community members. The reported claim site used register-tradecaโฆ
MalwareTips reports in a post published October 21, 2026 that an Audius airdrop scam uses the lookalike site audius-eligibility[.]com to impersonate the music platform Audius. The page advertises a supposed retroactivโฆ
In a post published October 21, 2026, MalwareTips warns of a Merkl Rewards scam that impersonates Merkl, a real platform that distributes incentives across decentralized finance applications. The reported counterfeitโฆ
app.claim-merkle.xyz
Fake Merkl rewards claim page (genuine app is app.merkl.xyz)
Germany's Federal Financial Supervisory Authority (BaFin) warned on 21 October 2026 about offers on the website kalyptowave.net. According to BaFin's findings, the operators of the website are offering financial serviโฆ
In an investigation published October 20, 2026, MalwareTips concludes that High5casin.com is a fake crypto casino. It reports the domain was registered on October 17, 2026, three days before its check, and is built frโฆ
high5casin.com
Also high5casion.com and high5casnio.com (same-day MalwareTips reports, same scam kit)
MalwareTips reports in an investigation published October 20, 2026 that Gabowex.com is a fake crypto casino. It says the domain was registered on October 19, 2026, less than a day before its check, and that the site iโฆ
gabowex.com
Same site kit as yerowin.com, kayspin.com, faonex.com and sodapex.com (per MalwareTips)
In an investigation published October 20, 2026, MalwareTips concludes that Nezwin.com is a fake crypto casino. It reports the domain was registered on April 25, 2026, that the MalwareTips URL scanner gives it a Safetyโฆ
MalwareTips reports in a post published October 20, 2026 that an OILCOIN airdrop scam advertises a limited 'early access' opportunity for early adopters and community members, and that a reported version appeared at rโฆ
In a post published October 20, 2026, MalwareTips warns of a Steer Finance token allocation scam that uses the project's identity to promote a false reward claim. It says the reported impersonation appeared at claim-sโฆ
claim-steer.finance
Fake STEER token allocation claim (genuine project domain is steer.finance)
MalwareTips reports in a post published October 20, 2026 that a ShareX airdrop scam uses the lookalike domain sharex-network[.]live to impersonate the ShareX project. The page copies the project's branding and displayโฆ
In a post published October 20, 2026, MalwareTips warns that stack-deckcoin[.]com runs a fake XRP Ledger airdrop. The page tells visitors that 150 XRP has been reserved for them as a 'community reward', with XRP imageโฆ
FX News Group reported on 20 October 2026 that Brian Jacques Creigh, a director of Panacea Capital Pty Ltd, was charged in the Melbourne Magistrates' Court on 19 October 2026 following an Australian Securities and Invโฆ
Panacea Capital Pty Ltd; defendant Brian Jacques Creigh
MalwareTips says Fabomex.com, registered on 15 October 2026, is a fake crypto casino built from a known scam kit: it shows a big promo-code bonus, then demands crypto 'verification deposits' before any withdrawal.
fabomex.com
Same site kit as uniqgamb.com, monarchplay.net, ejdrop.com and zetmox.com (per MalwareTips)
BaFin warned on 19 October 2026 that primefincompany.com is suspected of offering financial, securities and crypto-asset services in Germany without authorisation, presumably misusing the identity of Harlow-based Prime Finance LTD.
primefincompany.com
Website suspected of misusing the identity of Prime Finance LTD (Harlow, England)
France's AMF added 26 web addresses (24 distinct sites) to its blacklist of sites offering crypto-assets or crypto services illegally in France, including aureoncorevix.net, essorinvexaro.fr and bitgrokapp.com.
MalwareTips warns that overview-keeta.pro imitates the Keeta project to promote a fake $KTA 'distribution' and push wallet connections. The real Keeta (keeta.com) is impersonated, not the scammer.
overview-keeta.pro
Impersonates the Keeta project (real site keeta.com is not the scammer)
MalwareTips says Polymarket2026.com is a fake crypto casino rated High Risk (44/100), built from a known scam kit. It uses the Polymarket name, but the real Polymarket (polymarket.com) isn't involved and doesn't run the site.
polymarket2026.com
Same site kit as domewin.com, raffle.casino, nationalcasino.casino and winorax.cc
MalwareTips says Revsax.com, registered just one day before its check, is a fake crypto casino built from the same kit as domewin.com and other exposed sites, and that it demands crypto 'verification deposits' before withdrawals.
revsax.com
Same site kit as domewin.com, raffle.casino, nationalcasino.casino and winorax.cc
MalwareTips says Domewin.com, registered on 3 October 2026, is a fake crypto casino built from a known scam site kit: it credits a big promo-code bonus, then demands a crypto 'verification deposit' before any withdrawal.
domewin.com
Same site kit as raffle.casino, nationalcasino.casino, winorax.cc and patowin.com
MalwareTips warns that fake Firelight 'vote rewards' pages on lookalike domains promise 1.25x claiming power for voting on a distribution date, to lure crypto wallet connections; the real project is at firelight.finance.
MalwareTips warns that lookalike 'Make Aliens Great Again' sites (makealiensgreatagain[.]app, makealiengreatsagain[.]com) push a fake $MAGA token allocation described as a wallet drainer; the established project uses makealiensgreatagain.com.
MalwareTips warns of a fake 'monthly XRP release' offer that borrows the Xaman wallet's identity on lookalike domains such as xamanwallet-token[.]pro and xaman-wallet[.]com to push wallet approvals; Xaman is not involved.
MalwareTips says Winorax.cc is a fake crypto casino built on a known scam site kit: it credits a large bonus, then demands a fresh crypto deposit before any withdrawal.
winorax.cc
Same site kit as cashplay.cc, riftano.com, zosanx.com and zelowin.com