The US Foreign Affairs Department of the US Treasury (OTA) has charged sanctions against the Funnull Technology Inc. and its administrator Lizhay for providing infrastructure for holding for holding Romantic baits scam This led to mass losses of cryptocurrency.
The Treasury has accused the company that self -byh, provided thousands of sites involved in virtual currency investment scams, which forced the Americans to lose billions of dollars annually.
“Funnull directly contributed to a few of these schemes, leading to more than $ 200 million losses reported in the USA,” Agency – Note In the press -release. The average loss is estimated by over $ 150,000 per person.
String, also called Fang Neng CDN (fun (.) Io, Bulletin (.) Com, fun () app and Bulletin ( imposed The supply chain is widely used polyphil (.) IO JavaScript library.
Last year Analysis Silent Push disclosed The fact that the infrastructure associated with Funnull was used to promote investment scams, fake trading applications and suspected gambling networks. The infrastructure was named Triad Nexus.
Then earlier in February the cybersecurity campaign attributed Settled by the practice, which was called infrastructure in which the company has rented IP -residues from major hosting providers such as Amazon Web Services (AWS) and Microsoft Azure for criminal sites.
Having nominated this aspect, the Treasury noted that Funnull allows virtual currency investment, acquiring IP -residues with major Cloud Services companies around the world and selling them cybercriminals for scam platforms and other malicious web.
“Funnull generates domain names for websites on purchased IP -Drasses using domain algorithms (DGAS) -programs that generate a large number of similar but unique websites for web -dysencies for cybercriminals,” the agency said.
“These services not only make it easier for cybercriminals to betray themselves on the trusted brands when creating the scam sites, but also allow them to quickly switch to various domain names and IP -residents when legitimate providers try to reduce sites.”
The Treasury also accused the fun of the polyphil (.) Io with the intention to redirect visitors of legitimate websites for web -shakes and Internet sites, some of which are related to Chinese criminal money laundering operations.
In addition, the department claimed that his administrator Liu, a Chinese citizen, had electronic tables and other documents that contained information about the company’s employees, their implementation and progress of their work.
The tasks assigned to them included the assignment of domain names by criminal subjects for fraud with virtual currency, phishing scammers and online gambling.
The Flash Autonomous Alert, the US Federal Bureau (FBI) said that 548 unique canonical names (CNAME), related to more than 332,000 unique domains since January 2025, have been identified.
“Between October 2023 and April 2025, several domains were observed in several domains. – Note. “During this time, hundreds of domains using fun infrastructure simultaneously moved from one IP to another either on the same day or the same term.”