vesq.io

Deposit wallets of 5 more 'calm-ui' kit fake exchanges incl. novabitex[.]com, cobinhood[.]io, vesq[.]io: 125 addresses, 7 brands on one TON counter

• Scam type: Scam
• Chains: Bitcoin, EVM, Tron, Solana, XRP Ledger +2 more
• Project or site name: MindChain Swap / NarwhalSwap (calm-ui fake-exchange kit)
• Incident date: 2026-10-25
• Reported: 2026-10-26
• Last updated: 2026-10-26

These are 130 distinct crypto deposit addresses (125 filed here, plus the shared TON wallet, filed in report 2d017335, and 4 Bitcoin Cash addresses, all five shown shortened) shown on the logged-in deposit pages of five more fake cryptocurrency exchange sites running the same software kit: novabitex[.]com, bcmex[.]io, biqanex[.]com, cobinhood[.]io and vesq[.]io (brand "Alter"). A research account was opened on each site on 2026-10-25, and every address below was copied from the site's own Wallet → Deposit page between about 6:23 and 6:43 PM CT. Earlier reports: this follows our report on the…

Other addresses in this report: bc1q7zpeu9k3lju8nskr0wfl37u95ql4yc7szv29zp, 0xe40cb222fff5b4f71432d4322ccfb1a9795ada4b, 0xd8bcbe3a6f3f851225c9c833ae12155cd614066b, TJg9RNWGJtAnFSSa7GXfyGKQCb9wwuBMV6, 0x128cefeb2ebf6da34c0a215b186647cc3a96e788, 0x894c92d170bfbf40d8a04f65360350bb98d4fba8, 0xd85dfba29aa9affc72e609fa47356fdf19c8554b, TQaYdUWoaNE7cWZR3ygVE3GASEZujwLCMRj5LiequWr, 0xb14513f622dfa064732c5a01bd021d44fc6985e8, Gqb5UAC9BuuTk21qA8vEgzNQ1qXWLHnMCcXoNokKci83, 0x58b9c2823ba8419bbc9fb2be0d3af46cea22dd64, 0x414bf8fbddc5c8c4676f1338ff26f789f301011c, 0x71ebabdb2de07027ba6c82f5c8c4a9f3350901b7, HnknNztZLXSxVXGfy21qcbnzXjus6udNeS4EsdDdo9UU, 0x7f4ae063f685b6dae6c2b36b7997892878e2930f, rBvJ1fF6acYk1Ge1Zwk4zRYpYjxXXkmAMb, 0x0d5bf72547d902484934a94ef32ef81d86ea764f, DRPs4nWiW5eL5TgjYQEBvYz1Jd97hNQmkz, TEDXsU7KZN6CbCuoe7F55HKASgax2SdZ95, 0xf5a72eecb3fd9b254ddc0650139ca3f032d3a0a5 and 105 more

Websites in this report: novabitex.com, bcmex.io, biqanex.com, cobinhood.io

Linked reports: Deposit wallets of 6 'calm-ui' kit fake exchanges incl. cryptovos[.]com, coinsco[.]io, hederabit[.]com: 131 addresses, shared TON backend (Oct 2026), Fake-exchange kit follow-up: 7 more 'calm-ui' sites incl. doostoken[.]com, labswap[.]io, nozdex[.]com, cryptrex[.]io (Oct 2026), Phishing site cobinhood.io (CobinHood) — CryptoScamDB, 33 more fake-exchange sites on the 'calm-ui' kit, incl. bcmex[.]io, binoter[.]io, alfobit[.]com: identical JS, live sign-up (Oct 2026)

33 more fake-exchange sites on the 'calm-ui' kit, incl. bcmex[.]io, binoter[.]io, alfobit[.]com: identical JS, live sign-up (Oct 2026)

• Scam type: Scam
• Project or site name: MindChain Swap / NarwhalSwap (calm-ui fake-exchange kit)
• Incident date: 2026-10-25
• Reported: 2026-10-25
• Last updated: 2026-10-25

These 35 live websites run the same 'calm-ui' software kit as the fake crypto exchanges in our earlier reports, such as doostoken[.]com, cryptovos[.]com, coinsco[.]io, labswap[.]io and wexkey[.]com. None of them was covered in those reports. Each was checked on 2026-10-25 between 23:00 and 23:10 UTC. On every site the homepage loads kit JavaScript files whose SHA-256 hashes are byte-identical to the kit files on already-reported sites, and the /signup page is live (HTTP 200) and contains the kit's account-registration call. Earlier reports: https://block…

Linked reports: Deposit wallets of 6 'calm-ui' kit fake exchanges incl. cryptovos[.]com, coinsco[.]io, hederabit[.]com: 131 addresses, shared TON backend (Oct 2026), Fake-exchange kit follow-up: 7 more 'calm-ui' sites incl. doostoken[.]com, labswap[.]io, nozdex[.]com, cryptrex[.]io (Oct 2026), Takedown update: doostoken[.]com ('calm-ui' fake-exchange kit) placed on registrar hold by NiceNIC (Oct 2026), Phishing site cobinhood.io (CobinHood) — CryptoScamDB, ScamSniffer Crypto Phishing Domain Blacklist