These fraudulent websites are posing as online trading platforms and investment firms, advertising services such as CFD trading, forex and cryptocurrency trading, copy trading, and portfolio management. They masquerade as professional companies offering access to global financial markets, promising advanced trading tools, automated trading, and high returns on investments. The sites claim to provide secure and regulated environments to attract individuals seeking to trade or invest in stocks, cryptocurrencies, commodities, and indices.
Obsidian Talon is an active network of approximately 1,000 domains, nearly half of which are currently online, engaged in fraudulent schemes related to online trading and investment. The network utilizes at least 200 distinct brand names to present themselves as legitimate platforms offering services such as CFD trading, forex, and cryptocurrency investments. These entities falsely advertise access to global financial markets, advanced trading tools, and high investment returns to attract victims. The infrastructure details for this network are currently unknown. The network's operations are designed to deceive individuals seeking investment opportunities in financial markets.
AI-generated summary
Category
CFD/ForexBrands
1428Domains
Down domains
448Unique IPs
331Detection signals
0Status
activeDate range
Apr 2026 — May 2026Bloc Experts appears to be a financial services company that likely focuses on blockchain or cryptocurrency-related expertise and consulting services based on its domain name.
Block Capital Limited appears to be a financial services company that likely offers investment or trading services, based on the corporate naming structure suggesting capital management operations.
Block Cypher Trades appears to be a cryptocurrency trading platform that claims to offer digital asset trading services. The brand name suggests a focus on blockchain-based trading operations.
Domains in this network have been flagged by financial regulators across 5 countries.






Encountered a site from this network?
Your report helps us track and expose these operations.





