MalwareTips warns that overview-keeta.pro imitates the Keeta project to promote a fake $KTA 'distribution' and push wallet connections. The real Keeta (keeta.com) is impersonated, not the scammer.
overview-keeta.pro
Impersonates the Keeta project (real site keeta.com is not the scammer)
MalwareTips says Polymarket2026.com is a fake crypto casino rated High Risk (44/100), built from a known scam kit. It uses the Polymarket name, but the real Polymarket (polymarket.com) isn't involved and doesn't run the site.
polymarket2026.com
Same site kit as domewin.com, raffle.casino, nationalcasino.casino and winorax.cc
MalwareTips says Revsax.com, registered just one day before its check, is a fake crypto casino built from the same kit as domewin.com and other exposed sites, and that it demands crypto 'verification deposits' before withdrawals.
revsax.com
Same site kit as domewin.com, raffle.casino, nationalcasino.casino and winorax.cc
MalwareTips says Domewin.com, registered on 3 October 2026, is a fake crypto casino built from a known scam site kit: it credits a big promo-code bonus, then demands a crypto 'verification deposit' before any withdrawal.
domewin.com
Same site kit as raffle.casino, nationalcasino.casino, winorax.cc and patowin.com
Pimpri-Chinchwad police have invoked MCOCA against six men they accuse of belonging to a syndicate that took Rs 86 lakh from a senior citizen through a fake trading app and turned it into USDT. These are allegations; no conviction is reported.
Tejas D. Lokhande; Avinash D. Bakalikar; Harshal D. Bora; Sonu H. Sharma; Gaurav R. Gadge (Alex); Akhil S. Nelluri
Bhubaneswar police say they arrested three men accused of opening mule accounts for two fake firms, Trideep Traders and Trideep Technologies, used by fraudsters behind a Rs 3.84 crore trading-investment scam. No conviction is reported.
Idaho's Attorney General warns that almost 400 Idaho Power accounts have seen fraud, with scammers using spoofed out-of-state numbers, fake outage calls and fake sites like energexespower.com. Charges may show as 'Stallion' or 'PayEnergy'.
energexespower.com
Card charges named 'Stallion' or 'PayEnergy'; calls from area codes 224, 470, 725
The CBI says it arrested K. Muhammed Fasal, accused of running a network that bought ATM cards from students and smuggled them to Dubai to cash out a Rs 1 crore fraud by fake FedEx officials and 'cyber police'. No conviction is reported.
Jaipur cyber police say they arrested a Maharashtra gym trainer accused of supplying mule accounts, via a Telegram channel called 'BRO PAY', to a gang behind a Rs 2.12 crore 'digital arrest' fraud. These are allegations; no conviction is reported.
Hyderabad police say they arrested two Ameerpet businessmen accused of moving money from a Rs 29.17 lakh 'digital arrest' scam in which callers posed as Delhi Police, CBI and ED officials. These are allegations; no conviction is reported.
Mohd. Ashfaq Hussain; Ahmed Najeeb Uddin; 'Sachin' (Bengaluru resident, absconding)
MalwareTips says drmichaelspencer.com sells 'Men's Growth' pills using Shark Tank-style video, an unverified 'Dr. Julia Caldwell' persona and a claimed Lori Greiner investment. Shark Tank, ABC and Lori Greiner are not shown to be involved.
drmichaelspencer.com
Advertised persona 'Dr. Julia Caldwell' (unverified, per MalwareTips)
MalwareTips says My-robux10000.blogspot.com is a free Robux scam: it takes a Roblox username, plays a fake generator and then locks the 'reward' behind paid offers. No Robux is delivered and Roblox isn't involved.
Comprova reports that Threads profiles posing as ordinary users push a fake WePink survey that 'pays' R$830, then demand a R$19.95 Pix 'anti-fraud fee' payable to SoluΓ§Γ΅es RA LTDA. WePink is not behind it.
Pix payee 'SoluΓ§Γ΅es RA LTDA' (CNPJ 69.156.627/0001-32), per Comprova
MalwareTips rates Bobbleheadstown.com High Risk (34/100) as a network dropshipping store whose only contact addresses are free Gmail and Outlook accounts.
MalwareTips flags Browsshoeco.com, registered three days before its check, as a High Risk (38/100) copycat store; it is one letter off brownsshoeco.com, the site of genuine retailer Brown's Shoe Fit Co., which is not involved.
MalwareTips flags Atlasstationershop.com, registered three days before its check, as a High Risk (24/100) copycat store; the genuine Chicago shop Atlas Stationers (atlasstationers.com) is not involved.
MalwareTips flags Kickmate.in, registered two days before its check with hidden ownership, as a High Risk (38/100) dropshipping store in a scam network.
MalwareTips flags Ascentamsterdam.nl as a High Risk (38/100) copycat store with a copied catalog and hidden ownership; 5 of 93 VirusTotal vendors mark it malicious or suspicious.
MalwareTips rates Bergberg.shop Dangerous (18/100) as a copycat store borrowing Berg & Berg branding; the genuine Nordic menswear brand (bergbergstore.com) is not involved.
MalwareTips rates Okyesme.com Dangerous (15/100) and describes it as a dropshipping store from a network of lookalike shops, with low-quality items and returns that must go back to China.
MalwareTips rates Modesmethod.com Dangerous (15/100) and describes it as a scam-network dropshipping store selling low-quality items from China, with returns to China at the buyer's cost.
MalwareTips rates Bluesailinc.com Dangerous (15/100) and describes it as a dropshipping store in a scam network of near-identical shops: low-quality items from China, and returns that must go back to China at the buyer's cost.
MalwareTips warns that fake Firelight 'vote rewards' pages on lookalike domains promise 1.25x claiming power for voting on a distribution date, to lure crypto wallet connections; the real project is at firelight.finance.
MalwareTips warns that lookalike 'Make Aliens Great Again' sites (makealiensgreatagain[.]app, makealiengreatsagain[.]com) push a fake $MAGA token allocation described as a wallet drainer; the established project uses makealiensgreatagain.com.
MalwareTips warns of a fake 'monthly XRP release' offer that borrows the Xaman wallet's identity on lookalike domains such as xamanwallet-token[.]pro and xaman-wallet[.]com to push wallet approvals; Xaman is not involved.
MalwareTips says Winorax.cc is a fake crypto casino built on a known scam site kit: it credits a large bonus, then demands a fresh crypto deposit before any withdrawal.
winorax.cc
Same site kit as cashplay.cc, riftano.com, zosanx.com and zelowin.com
MalwareTips says Patowin.com, registered one day before its check and built on a known scam site kit, is a fake crypto casino that locks winnings behind a 'verification deposit'.
patowin.com
Same site kit as cashplay.cc, riftano.com, zosanx.com and zelowin.com
MalwareTips says Nationalcasino.casino, registered one day before its check, is a fake crypto casino that credits a big bonus and then demands a 'verification deposit' before any withdrawal.
nationalcasino.casino
Same site kit as winorax.cc, patowin.com, cashplay.cc and riftano.com
US prosecutors say 777 Partners co-founder Joshua Wander pleaded guilty to wire and securities fraud over a scheme that defrauded lenders and investors of more than $500 million; he agreed to forfeit at least $500 million and is due to be sentenced on 1 March 2027.