Scam Report: pavilion.fx.pro
Receiving Address: 19etnbw2bHTjZMmFda8s5KzNac5Z8E68EG
Blockchain: Bitcoin (BTC)
Amount Lost: $18,000.00
Scam Type: Investment Fraud

Warning: Investigating PavilionFX Scam (pavilionfx.pro)
If you’ve stumbled upon the website pavilionfx.pro, there are important findings you need to know. Our OSINT research has uncovered key details about this fraudulent scheme that you should be aware of if you are trying to gather information or seek assistance.

The domain pavilionfx.pro is registered with NameCheap, Inc., a registrar known for supporting a wide range of web services. This domain uses Hostinger International as its hosting provider, with ns1.dns-parking.com and ns2.dns-parking.com as its nameservers. Hostinger is an ISP known for both legitimate services and instances involving suspicious websites. The presence of mx1.hostinger.com and mx2.hostinger.com for mail exchange indicates that email services tied to the site are routed through Hostinger as well.

A notable characteristic of PavilionFX is its use of various interactive widgets and JavaScript libraries, such as JivoSite, TradingView, SmartSupp, and Tidio. These tools, while common in legitimate websites, are deployed here to create a professional and trustworthy user experience that can lure unsuspecting visitors. Furthermore, the presence of live chat widgets like LiveChat and MyLiveChat implies that the scammers might interact with potential victims in real-time, enhancing their credibility.

The website employs a mix of modern development frameworks and libraries, including jQuery 3.6.1, Alpine.js, Magnific Popup, OWL Carousel, and Intersection Observer, which all contribute to a polished, user-friendly interface. This attention to detail and user experience is designed to mislead victims into believing the website is a legitimate financial platform.

From a technical perspective, the use of SSL encryption, verified by Symantec Secure Site and Let’s Encrypt, further reinforces the illusion of safety. While this may comfort unsuspecting users, SSL certificates alone do not indicate trustworthiness. PavilionFX also implements HSTS (HTTP Strict Transport Security), adding another layer of superficial security.

The site’s infrastructure shows strong ties to Hostinger as a hosting provider and DNS service, pointing to potential channels for investigation through Hostinger’s records. The LiteSpeed web server and QUIC protocol used on PavilionFX signal that it is optimized for fast load times and network efficiency, contributing to an overall sophisticated setup.

PavilionFX features verified links to Facebook, Instagram, and YouTube, which might be part of a strategy to establish social proof or redirect victims to additional platforms associated with the scam. The site also adheres to DMARC and SPF email authentication standards, which may indicate attempts at establishing a false sense of legitimacy for communications.

If you’ve been affected by this scam or have any information that could aid in identifying the perpetrators, please contribute what you know. Your insights could help create a more complete picture and prevent further victimization.