Receiving Address: 0x64eee9b4a11e19a4f74032d386ec56f3ea12d7f4
Type of Scam: Investment
Cryptocurrency: USDT
I want to share critical findings from an OSINT investigation into the fraudulent website http://www.vbcoisa.vip. If you’ve encountered this site or are currently investigating it, the information here could be valuable in understanding the scope of this scam.

The domain http://www.vbcoisa.vip is registered through Gname.com Pte. Ltd., a registrar that has been associated with various scams and suspicious activities. The hosting for this domain is also provided by Gname.com Pte. Ltd., and its nameservers are a.share-dns.com and b.share-dns.net, both controlled by the same registrar. This suggests the possibility that the fraudsters are managing the entire infrastructure themselves, making it harder for authorities to track them.

A critical detail in this investigation is the absence of MX (Mail Exchange) records for the domain. This suggests that the operators may not be using email directly through the domain, or they might be relying on external email services to communicate with victims, further complicating any efforts to trace the scam.

The IP address associated with http://www.vbcoisa.vip is managed by Amazon CloudFront, a widely used content delivery network (CDN). While CloudFront is legitimate and widely used by many sites, it’s also a service that can be exploited to mask the real location of servers, which is a common tactic for scammers looking to obscure their operation. This is a clear indication that the website is utilizing a global infrastructure to avoid detection and make it more difficult for authorities to pinpoint the true origin of the scam.

If you’ve interacted with this site, made any payments, or have other details such as correspondence or transaction information, please share them. Your input could provide essential leads to help piece together the broader network of this fraudulent operation and prevent others from being scammed.

Stay vigilant and report any relevant information so we can collectively shut down this scam!