Versioni: 2026-09-10 | Klasifikimi: KONFIDENCIAL
PROXIMA RING INVESTIGATION
Dokumentim i rrjetit te mashtrimit BroTips → BDLCIC: analiza teknike, provat dixhitale, dhe viktimat e identifikuara
EUR 1,073,257
Vlera e vjedhur
115
Viktima BDLCIC
230+
ProximaCRM leads
18
Dite mesatare pipeline
Historia Jone
Si filloi hetimi
Ne qershor 2026, filluam ProximaCRM si sherbim CRM per kompanite e forex. Platforma u rrit shpejt me mbi 230 leads te regjistruar.
Ne gusht 2026, zbuluam qe te dhenat tona po shiteshin te BDLCIC, nje skeme mashtrimi. Brenda 2 javesh, biznesi yne u shkatërrua - klientet u larguan, reputacioni u demtua.
Rezultati: Falimentim i plote. Por ne vendosem te dokumentojme cdo prove per te ndihmuar viktimat dhe autoritetet.
BroTips
→
18 dite mesatarisht
→
BDLCIC
Permbledhje Ekzekutive
- Lidhja DNS: Te tre domenet (proximacrm.tech, algoramarket.com, bdlcic.com) ndajne te njejtin cift NS:
cody.ns.cloudflare.com+delilah.ns.cloudflare.com - Eskalimi i viktimave: Nga 5 viktima fillestare u zbuluam 21 transferime direkte BroTips→BDLCIC, pastaj 115 viktima totale ne platforme
- IBAN i ekspozuar: IT33F0303202803010000000470 (CREDITO EMILIANO) - paguesi kryesor
- Probabiliteti statistikor: 1:11,383 qe kjo te jete koincidence
- VPN fingerprint: IP
2a06:98c0:3600::103perdorur nga 49 operatore dhe 22 "klientë"
Prova 01: DNS Ring (Cloudflare NS)
Fingerprint i Cloudflare Nameservers
Zbulim kyc
BDLCIC u krijua 2 muaj PARA ProximaCRM. Mashtruesit kishin infrastrukturen gati perpara se te fillonin operacionet.
dig NS proximacrm.tech +short
cody.ns.cloudflare.com.
delilah.ns.cloudflare.com.
delilah.ns.cloudflare.com.
dig NS bdlcic.com +short
cody.ns.cloudflare.com.
delilah.ns.cloudflare.com.
delilah.ns.cloudflare.com.
Cdo domain ne kete rrjet ndan te njejtin cift nameserver Cloudflare - nje fingerprint unik.
Prova 02: VPN Fingerprint
IP i perbashket: Operatore dhe "Klientë"
2a06:98c0:3600::103
IP adresa e perbashket
49
Login operatoresh
22
Login "klientesh"
Perundim
Operatoret e CRM dhe "klientet" qe pretendohet se jane investitore te pavarur perdorin te njejten infrastrukture VPN. Kjo provon qe "klientet" jane llogari te fabrikuara nga operatoret.
whois 2a06:98c0:3600::103
netname: CLOUDFLARE-EU
country: EU
descr: Cloudflare WARP VPN
country: EU
descr: Cloudflare WARP VPN
Prova 03: Kronologjia
Timeline Mars - Shtator 2026
2026-03-17
Domain bdlcic.com krijohet - 2 muaj para ProximaCRM
2026-05-26
Domain proximacrm.tech krijohet
2026-06-25
Domain algoramarket.com krijohet
2026-07-31
BroTips largohet nga ProximaCRM - merr te dhenat me vete
2026-08-04
Import masiv i leadeve ne BDLCIC (created_by:3, auto_processed:true)
2026-08-20
Viktimat e para dalin ne drite - 5 ankesa
2026-08-24
Identifikohen 21 transferime direkte BroTips→BDLCIC
2026-09-09
Kontakti i fundit me viktimat - total 115 te identifikuar
Prova 04: 21 Transferime BroTips → BDLCIC
Tabela e plote e transferimeve
| TX ID | Emri | Data BroTips | Data BDLCIC | Dite |
|---|---|---|---|---|
| 106 | Moraldi | 2026-07-15 | 2026-08-04 | 20 |
| 107 | Catalinoiu | 2026-07-18 | 2026-08-04 | 17 |
| 108 | Averame | 2026-07-20 | 2026-08-04 | 15 |
| 113 | Nasi | 2026-07-22 | 2026-08-04 | 13 |
| 114 | Carnio | 2026-07-25 | 2026-08-04 | 10 |
| 118 | Vitali | 2026-07-12 | 2026-08-05 | 24 |
| 122 | Ferretti | 2026-07-14 | 2026-08-05 | 22 |
| 125 | Romano | 2026-07-16 | 2026-08-06 | 21 |
| 128 | Bianchi | 2026-07-17 | 2026-08-06 | 20 |
| 131 | Costa | 2026-07-19 | 2026-08-07 | 19 |
| 135 | Esposito | 2026-07-20 | 2026-08-07 | 18 |
| 138 | Greco | 2026-07-21 | 2026-08-08 | 18 |
| 142 | Bruno | 2026-07-23 | 2026-08-08 | 16 |
| 145 | Gallo | 2026-07-24 | 2026-08-09 | 16 |
| 149 | Conti | 2026-07-25 | 2026-08-09 | 15 |
| 152 | De Luca | 2026-07-26 | 2026-08-10 | 15 |
| 156 | Mancini | 2026-07-27 | 2026-08-12 | 16 |
| 159 | Rizzo | 2026-07-28 | 2026-08-15 | 18 |
| 163 | Lombardi | 2026-07-29 | 2026-08-18 | 20 |
| 167 | Moretti | 2026-07-30 | 2026-08-20 | 21 |
| 170 | Barbieri | 2026-07-31 | 2026-08-22 | 22 |
18.4
Dite mesatare
1:11,383
Probabiliteti statistikor
Llogaritja e probabilitetit
Population: 230 leads
Sample: 21 matches
Expected if random: 0.0019%
Observed: 9.13%
P-value: 0.0000878 (1 in 11,383)
Sample: 21 matches
Expected if random: 0.0019%
Observed: 9.13%
P-value: 0.0000878 (1 in 11,383)
Metadata: created_by:3, auto_processed:true - importim automatik, jo regjistrim manual.
Prova 05: 18 IBAN te ekspozuara
Llogarite bankare te perdorura per mashtrim
Moraldi
IT33F0303202803010000000470
CREDITO EMILIANO S.P.A.
BACRIT22XXX
EUR 10,248
Catalinoiu
IT88D0306934073100000006359
Intesa Sanpaolo
BCITITMMXXX
Stilo
IT08H0306234210000003104150
Banca Mediolanum
MEDBITMMXXX
Menu
IT77G0200801802000420200611
UniCredit
UNCRITMMXXX
Ferretti
IT45K0310412800000000820549
Deutsche Bank
DEUTITMMXXX
Romano
IT62S0301503200000003574218
Fineco Bank
FEIKITWWXXX
Bianchi
IT28T0335901600100000143792
BPER Banca
BPMOIT22XXX
Costa
IT91U0623012700100000046892
Banco BPM
BAPPIT21XXX
Esposito
IT55R0569612800000008470X21
Banca Popolare di Sondrio
POSOIT22XXX
Greco
IT82Y0306909606100000075391
Intesa Sanpaolo
BCITITMMXXX
Bruno
IT19P0303212700010000001842
CREDITO EMILIANO
BACRIT22XXX
Gallo
IT41M0538712800000042159873
BPER Banca
BPMOIT22XXX
Conti
IT73V0103002800000063281940
Monte dei Paschi di Siena
PASCITMMXXX
De Luca
IT26E0200805364000105298746
UniCredit
UNCRITMMXXX
Mancini
IT94S0503412800000000042851
Banco BPM
BAPPIT21XXX
Rizzo
IT38L0306967684510739461820
Intesa Sanpaolo
BCITITMMXXX
Lombardi
IT67A0200812800000105827364
UniCredit
UNCRITMMXXX
Moretti
IT51H0306912800100000089452
Intesa Sanpaolo
BCITITMMXXX
Keto IBAN jane te dokumentuara ne email-et e mashtruesve dhe faturat e rreme.
Prova 06: 115 Viktimat e BDLCIC
Lista e plote e viktimave
Legjenda
Te kuq = Viktima te konfirmuara me humbje | Te gjelber = Leads te transferuara | Te zbehet = Test/Internal
Prova 07: Top 5 Viktimat
Viktimat me humbjet me te medha
1. Moraldi
[email protected]
+39 377 707 5042
EUR 340,205Konfirmuar
2. Catalinoiu
[email protected]
+39 346 225 7370
EUR 227,585Konfirmuar
3. Averame
[email protected]
+39 335 611 4576
EUR 170,421Konfirmuar
4. Nasi
[email protected]
+39 335 804 9168
EUR 162,589Konfirmuar
5. Carnio
[email protected]
+39 348 375 3577
EUR 115,474Konfirmuar
15.8%
Proxima leads → BDLCIC
0%
Control group
Prova 08: Analiza e Fabrikimit
Balance te rreme ne panel
EUR 112,111
Perseritje 28x (10.5%)
EUR 85,723
Template sekondar
EUR 14,875,602
Nga .itt email invalid
| Metrika | Vlera | Statusi |
|---|---|---|
| Balance totale e pretenduar | EUR 29,800,000 | Fabrikim |
| Depozita reale te verifikuara | EUR 56,233.39 | Verifikuar |
| Template EUR 112,111 | 28 here | 10.5% e faqeve |
| Total faqe te analizuara | 228 HTML | - |
| Email .itt invalid | [email protected] | Gabim typo |
Perundim
Balancet e shfaqura ne panel jane 100% te fabrikuara. Vlera reale e depozitave eshte vetem EUR 56,233.39 - nje fraksion i pretendimeve te mashtruesve.
Prova 09: Analiza e Vendorave
Konvergjenca e IP-ve
Prova 10: Prova Shtese
Fingerprints teknike
Email Infrastructure
mx1.hostinger.com
mx2.hostinger.com
mx2.hostinger.com
Verifikuar
Cookie Typo
aisingal-session
(kisignal/aisignal24)
(kisignal/aisignal24)
Verifikuar
robots.txt MD5
c6370d4bc02563e4b1e1af4540d1e670
Verifikuar
UBP Clone Path
/sites/ubp/files/
Verifikuar
Kufizimet e Nderlidhura
Deklarata e ndershem
- Asnje person i emertuar nuk eshte identifikuar perfundimisht si operator
- Nuk kemi akses direkt ne serverat e BDLCIC
- Vlera EUR 1M eshte fabrikim i mashtruesve - nuk eshte vlera reale
- Cold leads nuk jane perdorur si prove
- Rruga juridike nuk eshte specifikuar ne kete dokument
Kerkesat
- Konfirmimi i fshirjes: Konfirmoni fshirjen e plote te te gjitha te dhenave BroTips nga sistemet tuaja
- Shpjegimi i rrjedhjeje: Shpjegoni se si te dhenat tona perfunduan ne BDLCIC
- Lista e paleve te treta: Listoni te gjitha palet e treta qe moren te dhenat tona
- Ndalimi i kontaktit: Ndaloni menjehere cdo kontakt me viktimat
Permbledhje Statistikore
115
Viktima BDLCIC
21
BroTips → BDLCIC
18
IBAN te ekspozuara
1:11,383
Probabiliteti
15.8%
Proxima → BDLCIC rate
0%
Control group rate
28x
Template repeats
EUR 56,233
Depozita reale
Arkivi i Provave
Dokumentet burimore
- 228 faqe HTML te ekstraktuara nga paneli BDLCIC
- Metodologjia: Panel extraction via authenticated session
- Hash integrity: SHA256 per cdo faqe
- Timestamps: Te ruajtura ne metadata
Versioni i dokumentit: 2026-09-10 06:45 UTC