49 live fake-exchange sites on an older kit generation linked to 2024 venanco[.]com and cryptovos[.]com: byte-identical JS, live sign-up (Oct 2026)

  • Scam type: Scam
  • Project or site name: venanco-generation fake-exchange kit (earlier generation of the cryptovos kit)
  • Incident date: 2026-10-25
  • Reported: 2026-10-25
  • Last updated: 2026-10-25

These 49 live websites run what appears to be an older generation of the fake-exchange software kit behind cryptovos[.]com and the other sites in our earlier reports. The link is venanco[.]com, a 2024 fake exchange. An archived copy of its sign-up page (Wayback Machine, 2024-06-06) loads app.min.js (SHA-256 beginning 84c100eb29667fad) and sing-in.min.js (beginning 648f318c417aef7e), and uses the same /api/auth/register endpoint (captcha and promo-code fields), /profile/wallet redirect and logo naming as the 2026 kit. PCrisk lists the XLM wallet GBKVX2PY…SINA for venanco[.]com in 2024, and…

Linked reports: Deposit wallets of 6 'calm-ui' kit fake exchanges incl. cryptovos[.]com, coinsco[.]io, hederabit[.]com: 131 addresses, shared TON backend (Oct 2026), Fake-exchange kit follow-up: 7 more 'calm-ui' sites incl. doostoken[.]com, labswap[.]io, nozdex[.]com, cryptrex[.]io (Oct 2026)

Report a crypto scam · How to report a crypto scam