Back to community
    Community abuse report

    Confirmed abuse on *****[.]to

    Forwarded to Hoster
    •
    Case writeup
    AI-generated summary, automatically screened for personal data before publication.

    Dedicated scam shop and crypto-scam site reported and forwarded, verified offline

    The reported domain *****[.]to was set up dedicated to scam-shop, crypto-scam and illegal-content activity, according to the case data. The report was classed as confirmed, has evidence on file, and uses Cloudflare; the registrar is Tonic. The case was monitored by Fraudpol from the moment the report arrived and is currently recorded as active.

    Timeline

    The report was made on November 3, 2026 and last updated on November 3, 2026. The first action was taken 39 minutes after the report. Notifications were sent through threat intelligence feeds, the hosting provider and the domain registrar, and the case status is forwarded. Outcome: verified offline by our team. No neutralization date is recorded.

    Indicators

    • Domain: *****[.]to
    • Behaviour flags: scam-shop, crypto-scam, illegal-content
    • Site context: dedicated
    • Registrar: Tonic
    • Uses Cloudflare: yes
    • Channels: threat intelligence feeds, the hosting provider, the domain registrar
    Evidence preserved · SHA-256: 4f234e93…

    What to do

    Do not make payments or enter personal or wallet details on this site. If you have already paid or shared details, contact your bank or payment provider and report the incident to your local authorities.

    A member of the Fraudpol community reported *****[.]to for confirmed abuse. Screenshots, evidence files, and reporter contact details are kept private and shared only with hosters, registrars, and law enforcement when action is required.

    Reported behaviors

    scam shop
    crypto scam
    illegal content

    How this listing works

    Listings are published only after verification by our team and are removed if a review shows the site is legitimate. Fraudpol never publishes full URLs, screenshots, evidence files, or the reporter's identity.

    Full domain is published once the case is closed.