Scam Network

Cipher Vault

Mixed / OtherActive
intelligence profile

Network operating mixed cryptocurrency exchanges and wealth advisory scams using shared content fingerprints. Operations leverage duplicated backend infrastructure across multiple branded fronts to process fraudulent trading and investment solicitations.

Active domains
36
Down domains
0
Unique IPs
23
Signals
1
Warnings
4
Active since
Mar 2026
Hosting locations
  • United StatesUnited States
    36 · 100%
Hosting providers
  • AS13335 Cloudflare, Inc.AS13335 Cloudflare, Inc.
    36 · 100%
ASN distribution
  • Cloudflare, Inc.Cloudflare, Inc.
    36 · 100%
Domain registrars
  • Gname.com Pte. Ltd.Gname.com Pte. Ltd.
    19 · 52.8%
  • GoDaddy.com, LLCGoDaddy.com, LLC
    6 · 16.7%
  • NameSilo, LLCNameSilo, LLC
    3 · 8.3%
  • IInterNetX GmbH
    2 · 5.6%
  • Dynadot IncDynadot Inc
    1 · 2.8%
  • DDominet (HK) Limited
    1 · 2.8%
  • HOSTINGER operations, UABHOSTINGER operations, UAB
    1 · 2.8%
  • Cloudflare, Inc.Cloudflare, Inc.
    1 · 2.8%
  • NameCheap, Inc.NameCheap, Inc.
    1 · 2.8%
  • AAmazon Registrar, Inc.
    1 · 2.8%
SSL issuers
  • Let's EncryptLet's Encrypt
    35 · 97.2%
  • Google Trust ServicesGoogle Trust Services
    1 · 2.8%
Nameservers
  • ns1.fbi.seized.gov
    36 · 100%
  • ns2.fbi.seized.gov
    36 · 100%