18 Domains, One Operator, Two Takedowns
18 domains, 10 weeks, one operator. The network behind NordBastion connects to sanctioned Russian disinformation infrastructure and a payment processor fined $176M for AML violations.
Research Series
Investigative Research
These are investigative deep-dives into online scam networks — separate from the SMB tech-care blog. The NordBastion series documents a crypto hosting scam built by AI, its fake review network, and the operator behind it. Not advisory content for small businesses — original reporting on internet fraud.
Scammers Are Building Sites for ChatGPT to Recommend
The NordBastion scam network publishes llms.txt, MCP server cards, and x402 payment metadata designed to be ingested by AI crawlers. A victim confirmed ChatGPT recommended the scam site.
The Fake Review Network Behind NordBastion
SkipKYC and NoKYCZone both rated NordBastion as LEGIT. Both domains were registered the same day, one hour apart. This is not independent analysis.
I Found a Crypto Hosting Scam Built by AI
NordBastion looks like a principled privacy host. It is a trap dressed in doctrine. Here is how I identified the scam before anyone deposited a satoshi.