'VIP Trading Account' fake trading-app kit on 8 lookalike domains (CME Edge / Schwab / Sequoia lookalike names; 45.207.242.26)
- Scam type: Investment scam
- Chain: EVM (Ethereum, BNB Chain, Base and other EVM chains)
- Reported: 2026-10-16
- Last updated: 2026-10-17
Fake "VIP Trading Account" crypto/derivatives trading web app found on lookalike domains. There is NO victim report yet. Any impersonation comes from domain names and site text only. What Block6iQ verified directly on 2026-10-16 (about 09:20-09:30 CT; pages rendered in a browser past the site's /_guard/ JavaScript "Security Check" gate, no accounts created): - All 8 domains listed in this report resolve to the same IP, 45.207.242.26 (Google DNS-over-HTTPS). They use Cloudflare nameservers becky/conrad and were registered at NameSilo between 2026-08-30 and 2026-09-24 (Verisign RDAP: cmettlsecs…
Other addresses in this report: 0xcda676c38563ff78be51639e847d961362eefa51, TZEeLAiHkyP6FnfaLNvQt95bHewZcmYY5D, bc1pgtj8ne4utf6h866ydecvmjly0dvly259faxgzpc9p0s46hz5u5qs2sg0z7
Websites in this report: schwablros.com, sequoiaev.com, bitbtgovip.com, gxyfinclcs.com, cmegclo.com, cmettlsecs.com, svipeclote.com