Receiving Addresses:

• 0x9816b28586e70ca63fb8f708e909cf89f3cf0c33 (Ethereum)
• 0x7cf015dd543151a954c131e34b6d00911530544e (Ethereum)

Type of Scam: Investment scam
Details: Associated with the website cgiinc.cc

This report documents a fraudulent cryptocurrency scam associated with the website cgiinc.cc, which presents itself as a crypto exchange platform offering unrealistically high returns on investment (up to 90%). The scam utilizes a series of fraudulent cryptocurrency receiving addresses where victims are instructed to send their funds. The platform primarily targets Ethereum (ETH) and USDC (Tether), exploiting these assets for illicit gain. Once funds are deposited, the victims face difficulties withdrawing their investments, and the platform becomes unresponsive, indicating a scam operation.

Scam Type:

• Fake Cryptocurrency Exchange
• Promises of unrealistic returns (up to 90% on investments)
• Withdrawals blocked after deposit
• Platform becomes unresponsive after funds are sent
• Receiving Wallet Addresses:

USDC:

• 0x9816b28586e70ca63fb8f708e909cf89f3cf0c33 (6,000 USDC)

ETH (Ethereum):

• 0x7cf015dd543151a954c131e34b6d00911530544e
• 0x19395e0441Feaf42aaE26E079ba29BAa688F6F41
• 0x8C014B265fFD4Db0626987C9c73C14f98855B7b9

Total Reported Losses:

ETH Transactions: Multiple deposits ranging from 0.136 ETH to 2.489 ETH, including significant individual transfers like 2.489092 ETH and 2.314442 ETH.
USDC Transactions: 6,000 USDC deposited to the wallet address 0x9816b28586e70ca63fb8f708e909cf89f3cf0c33 .

Blockchain Type:

1. Ethereum (ETH)
2. USDC (Tether)

Domain Information:

• Domain Name: cgiinc.cc
• Registrar: Gname.com Pte. Ltd.
• Registration Date: April 1, 2024
• Expiration Date: April 1, 2025
• Registrant Location: Arizona, USA

Nature of Scam:

Victims were enticed to invest in cryptocurrency through promises of high, guaranteed returns, with no actual trading or returns ever occurring. Once users deposited funds into the provided wallet addresses, they faced immediate difficulties withdrawing, and the platform became unresponsive to requests for account access or withdrawal of funds. The scam appears to be well-coordinated, using professional-looking branding to deceive victims into believing the platform was legitimate.

Recommendation:

Investigators should track the wallet addresses associated with the scam for any further fraudulent activity. It is recommended that victims report the incident to relevant authorities, and financial tracking agencies to monitor the flow of funds associated with these addresses.

Type of Scam: Investment Scam
URL of Scam: cgiinc.cc
Cryptocurrency Addresses:

0x9816b28586e70ca63fb8f708e909cf89f3cf0c33
0x7cf015dd543151a954c131e34b6d00911530544e (repeated multiple times)
0x19395e0441Feaf42aaE26E079ba29BAa688F6F41 (repeated multiple times)
0x8C014B265fFD4Db0626987C9c73C14f98855B7b9

Calculated Amount Loss: $140,000.00
Description: The victim was initially engaged in a romantic relationship which transitioned into an investment scam through the website cgiinc.cc. The scam involved multiple requests for transferring funds to various Ethereum addresses, purportedly for investment purposes. Despite transferring a significant amount, all attempts to recover the invested amounts have been ignored by the scam operators. The victim has taken actions including reporting to the Hong Kong police and has the documentation of transactions and communications with the scam entities.

Open-Source Intelligence Analysis: Investigative Report on Romance and Investment Scam at cgiinc.cc

Current Website:
The website cgiinc.cc was involved in a combined romance and investment scam, manipulating the victim emotionally and financially through the guise of a romantic relationship followed by fraudulent investment opportunities. The website has been taken down following complaints.

Domain and Hosting Information:

Registrar: Gname.com Pte. Ltd.
Registered On: 2024-04-01
Expires On: 2025-04-01
Updated On: 2024-11-21
Status: clientHold, clientTransferProhibited
Name Servers:a.share-dns.com, b.share-dns.net

Technical Analysis and Legal Action Recommendations:

Domain Registrar: Gname.com Pte. Ltd. Action Recommended: Attempt to retrieve ownership and transaction details despite the domain being in a hold status, which suggests regulatory or legal actions might be underway.
Investigative Measures: Engage cyber forensic experts to trace the flow of the transferred funds through the blockchain and identify potential recovery paths.
Critical Observations:
The significant financial loss and the method of operation suggest a highly organized scam network that uses emotional manipulation followed by financial deceit. The involvement of multiple Ethereum addresses indicates a sophisticated operation designed to launder the stolen funds.

Conclusion:
The case of cgiinc.cc represents a severe instance of cybercrime combining romance and investment scam elements. Immediate legal and investigative actions are crucial, focusing on the recovery of funds and prosecution of the offenders. Collaboration with international law enforcement and cybercrime units will be necessary given the cross-jurisdictional nature of the scam and the complex web of transactions involved.

Future Preventative Measures:
Educational outreach should be enhanced to inform the public about the risks of online relationships that transition into financial dealings, especially in platforms offering high returns on investments without clear credentials.

If you’ve encountered the domain cgiinc.cc, it’s critical to proceed with caution. This site has been linked to a high-value cryptocurrency scam operating under the guise of an investment platform. Here’s what we uncovered during our OSINT investigation, and we encourage you to share anything you know that might help stop this fraud.

The domain cgiinc.cc was registered on April 1, 2024, through Gname.com Pte. Ltd., and is set to expire on April 1, 2025. Its most recent update was on November 21, 2024, suggesting potential ongoing activity. The registrant’s contact information places them in Arizona, United States, but as often seen in scams of this type, this detail could be forged to mislead investigators.

One of the scam’s key features is its reliance on the Ethereum blockchain, where victims are directed to send funds to a specific address: 0x7cf015dd543151a954c131e34b6d00911530544e . This address has been associated with an investment fraud scheme, promising returns on cryptocurrency investments but delivering nothing in return. A reported $140,000 in ETH has already been funneled into this address, representing a significant financial loss.

These scams often use convincing websites and sophisticated tactics to lure investors, preying on their trust and offering false assurances of profitability. The website’s professional appearance and the Arizona-based registration details might lend an air of legitimacy, but the reality is far from trustworthy.

If you’ve encountered this scam, we urge you to report it to the appropriate authorities and consider sharing your experience here. Details like additional wallet addresses, communications, or screenshots could provide vital clues. For those investigating, digging deeper into the Ethereum transactions tied to the receiving address might uncover connections to other fraudulent activities.

Let’s collaborate to expose and dismantle scams like this. Any insight you can contribute could help prevent further losses and bring those responsible to justice. Share your findings below, and let’s keep the crypto community safe!