URL of Scam: coindeskline2.com

Type of Scam: Investment
Calculated Amount Loss: $153,036.00

Victim Description:
The victim was initially involved with Coindesk.com, which then changed its domain to Coindeskline2.com. The victim reported losing a total of $153,036.00 in funds, but the platform is now unresponsive, and the victim is unable to access their funds. This is indicative of an investment scam, where legitimate-looking platforms change domain names to avoid detection or accountability after defrauding users.

Open-Source Intelligence Analysis: Preliminary Findings on Fraudulent Activities Associated with Coindeskline2.com

Current Website:
The website, Coindeskline2.com, appears to be a fraudulent investment platform. It initially operated under the domain Coindesk.com, which is a legitimate cryptocurrency news platform, but switched to Coindeskline2.com to presumably avoid detection after scamming users. The victim lost a significant amount of money through this platform and now cannot recover any of their funds.

Domain and Hosting Information:

Registrar: GMO Internet Group, Inc. d/b/a Onamae.com
Registered On: November 23, 2023
Expires On: November 23, 2024
Updated On: November 24, 2024
Status: ok (The domain status indicates there are no restrictions on the domain’s transfer or management, making it less suspicious in that regard)
Nameservers:ns1.gm111.parklogic.com, ns2.gm111.parklogic.com

Technical Analysis:

Hosting: The domain is registered with GMO Internet Group, a legitimate registrar, but the use of nameservers like parklogic.com suggests the domain may be parked or associated with a service that masks the true nature of the platform. Parked domains often indicate fraudulent activity, especially if the platform’s content is minimal or misleading.
Domain Registration: The domain was registered recently (November 2023) and expires in November 2024. The relatively short registration period is a common characteristic of scams, as fraudsters often abandon these domains quickly to avoid detection.

Key Observations:

The platform’s sudden change from Coindesk.com (a trusted news website) to Coindeskline2.com is a major red flag. It is likely that the perpetrators are using the well-known name to mislead potential victims into believing they are engaging with a legitimate entity.
The domain’s use of ParkLogic nameservers may indicate that the domain is hosted on a service designed to obscure the true identity of the platform’s operators, making it harder for investigators to trace the ownership or location of the platform.

Recommendations:
Registrar (GMO Internet Group, Inc.): A subpoena should be issued to gather details on the domain’s ownership and any associated registration information that could lead to the perpetrators.
Blockchain Forensics: Investigating the wallet addresses associated with this scam can help trace the flow of funds and identify other potential victims. Any funds sent to addresses linked with this platform should be closely monitored.
ParkLogic: Investigate the ParkLogic hosting service to determine if the platform is utilizing its services to hide ownership details and evade detection.

Conclusion:
Coindeskline2.com is a fraudulent investment platform that appears to have rebranded from the legitimate Coindesk.com to avoid detection. The victim has lost a significant amount of money and is now unable to recover those funds. The use of ParkLogic nameservers and a recent domain registration suggest the platform’s operators are actively concealing their identity to evade law enforcement and regulators.

It is critical that law enforcement and financial authorities take action to investigate both the domain registrar and the ParkLogic hosting service to trace the perpetrators. Additionally, blockchain forensics can help uncover the movement of funds and identify any other individuals involved in this scam.