Bitcoin Forum
March 23, 2026, 08:52:03 PM *
News: Latest Bitcoin Core release: 30.2 [Torrent]
 
   Home   Help Search Login Register More  
Pages: [1]
  Print  
Author Topic: Alert: Potential Crypto Swap Scam Network | jud-ex, darkmap, byware, nokyc-noaml  (Read 28 times)
Trêvoid (OP)
Copper Member
Sr. Member
****
Offline Offline

Activity: 448
Merit: 486


CRYPTO ⇄ CRYPTO █ No KYC / AML


View Profile
Today at 11:27:56 AM
Merited by dkbit98 (1), albon (1)
 #1

Hello Bitcointalk community,

I'll get straight to the point. A few users on Bitcointalk and one of my clients were scammed by this individual. I conducted OSINT research and found several sites that share similarities with earlier scam sites (now offline)

Scam reports about jud-ex(.)com and darkmap(.)cc sites.

https://bitcointalk.org/index.php?topic=5576584.0
https://bitcointalk.org/index.php?topic=5570619.0
https://carigold.com/forum/threads/jud-ex-com-cryptocurrency-exchange-service.709663/post-27651833
https://www.okchanger.com/exchangers/Jud-ex-com



I believe there are similarities between those scam sites with byware(.)net and nokyc-noaml(.)cc




There may be additional sites like these. I believe the same Russian operator runs them and is targeting new victims. Please avoid using these services.

albon
Legendary
*
Online Online

Activity: 2380
Merit: 2073



View Profile
Today at 05:26:35 PM
Last edit: Today at 06:00:02 PM by albon
 #2

If the domain is only 10 days old, how can they claim at the bottom “© 2015 - 2026 ByWare”? This is a clear contradiction.

Their site has not existed for 11 years as they claim, this is outright deception.  Roll Eyes

byware(.)net | ARCHIVED

Quote
Registered On: 2026-03-13
Expires On: 2027-03-13
Updated On: 2026-03-15
Registrar: Tucows Domains Inc. IANA ID: 69
Age: 10 Days

I have looked at the both domains and indeed they use the same script with identical FAQ, ToS, and Affiliate Terms pages.. Also, There are no differences except for the logo and the domain name; the design and element layout are a 100% match.




nokyc-noaml(.)cc | ARCHIVED

Quote
Registered On: 2026-01-03
Expires On: 2027-01-03
Updated On: 2026-01-03
Registrar: Immaterialism Limited
Age: 2 Months 20 Days

Based on the source code of both websites, they share the exact same Tracker ID: 106889005. This confirms beyond any doubt that both sites are managed by the same person monitoring visitor traffic from a single dashboard and also, both platforms support the same languages (中文, हिन्दी, ES, PT, RU, FR, DE, UA) following the identical order and structural layout.

ByWare Yandex ID:
Code:
    <!-- Yandex.Metrika counter -->
    <script type="text/javascript">
        (function(m,e,t,r,i,k,a){
            m[i]=m[i]||function(){(m[i].a=m[i].a||[]).push(arguments)};
            m[i].l=1*new Date();
            for (var j = 0; j < document.scripts.length; j++) {if (document.scripts[j].src === r) { return; }}
            k=e.createElement(t),a=e.getElementsByTagName(t)[0],k.async=1,k.src=r,a.parentNode.insertBefore(k,a)
        })(window, document,'script','https://mc.yandex.ru/metrika/tag.js?id=106889005', 'ym');

        ym(106889005, 'init', {ssr:true, webvisor:true, clickmap:true, ecommerce:"dataLayer", referrer: document.referrer, url: location.href, accurateTrackBounce:true, trackLinks:true});
    </script>
    <noscript><div><img src="https://mc.yandex.ru/watch/106889005" style="position:absolute; left:-9999px;" alt="" /></div></noscript>
    <!-- /Yandex.Metrika counter -->


NoKYC-NoAML Yandex ID:
Code:
<!-- Yandex.Metrika counter -->
    <script type="text/javascript">
        (function(m,e,t,r,i,k,a){
            m[i]=m[i]||function(){(m[i].a=m[i].a||[]).push(arguments)};
            m[i].l=1*new Date();
            for (var j = 0; j < document.scripts.length; j++) {if (document.scripts[j].src === r) { return; }}
            k=e.createElement(t),a=e.getElementsByTagName(t)[0],k.async=1,k.src=r,a.parentNode.insertBefore(k,a)
        })(window, document,'script','https://mc.yandex.ru/metrika/tag.js?id=106889005', 'ym');

        ym(106889005, 'init', {ssr:true, webvisor:true, clickmap:true, ecommerce:"dataLayer", referrer: document.referrer, url: location.href, accurateTrackBounce:true, trackLinks:true});
    </script>
    <noscript><div><img src="https://mc.yandex.ru/watch/106889005" style="position:absolute; left:-9999px;" alt="" /></div></noscript>
    <!-- /Yandex.Metrika counter -->

There are no previous reviews for either site due to their recent registration. I strongly advise everyone to AVOID DEPOSIT ANY FUNDS TO THESE PLATFORMS.

Also, the representative’s account [ByWaRe] is a reactivated dormant account with a recent password reset, a common sign of a bought/hacked account used for scamming.


█████████████████████████
██
█████▀▀███████▀▀███████
█████▀░░▄███████▄░░▀█████
██▀░░██████▀░▀████░░▀██
██▀░░▀▀▀████████████░░▀██
██░░█▄████▀▀███▀█████░░██
██░░███▄▄███████▀▀███░░██
██░░█████████████████░░██
██▄░░████▄▄██████▄▄█░░▄██
██▄░░██████▄░░████░░▄██
█████▄░░▀███▌░░▐▀░░▄█████
███████▄▄███████▄▄███████
█████████████████████████
.
.ROOBET 2.0..██████.IIIIIFASTER & SLEEKER.██████.
|

█▄█
▀█▀
████▄▄██████▄▄████
█▄███▀█░░█████░░█▀███▄█
▀█▄▄░▐█████████▌▄▄█▀
██▄▄█████████▄▄████▌
██████▄▄████████
█▀▀████████████████
██████
█████████████
██
█▀▀██████████████
▀▀▀███████████▀▀▀▀
|.
    PLAY NOW    
Pages: [1]
  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!