By Ransom Watch | 13 October 2026 | Evidence review
Domains in this ecosystem are disposable, and their states change. The useful habit is not to celebrate a dead domain or despair at a live one, but to read the board on a date and say exactly what is on it. These are the dated readings for the set of sites associated in reporting and in court records with the dossier ecosystem we monitor, checked on 13 October 2026.
The board as of 13 October 2026
Two names fail to resolve at all: financescam.com and intelligenceline.com return DNS failures, and have for some time - the failure of financescam.com predates our formal notices, and we do not attribute it to any action of ours. Two names redirect to for-sale listings: criticalintel.com and proconsumer.com both land on a domain marketplace page offering the name for purchase. One, cybercriminal.com, is parked with a domain broker. Two remain live and publishing: fintelegram.com and letmeexpose.is.
What each state means
A DNS failure means the name currently answers nothing: expired, broken or withdrawn - the cause is not knowable from outside, and we do not guess it. A parked or for-sale name is inventory: someone holds it as an asset, and it can be reactivated or sold at any time. A live site is the only state that is actively publishing. Everything else is storage.
That distinction matters for how "progress" is counted. A network shedding names is not a network dismantled. The content a dead domain carried persists in archives and reposts, and a for-sale name can return under new management. In the public record of this ecosystem, the remedies with force behind them were not notices or complaints. They were court orders: in Goldstone Financial Group LLC and Anthony Pellegrino v. FinanceScam.com (N.D. Ill., case 1:25-cv-07283), a temporary order found a likelihood of success on claims including cybersquatting, defamation per se and trade libel, and the court's default judgment awarded $100,000 in statutory damages for each of the eight cybersquatted domains named in the complaint.
Why we publish the readings
Claims about takedowns decay fast; dated observations do not. We re-run these checks daily, and we will report the day any name on this board changes state - a dead domain answering again, a parked domain going live, a live domain going dark. The record, not the mood, is the measure.
Ransom Watch documents reported reputation-extortion networks and the evidence around them. Court references are to the public docket in case 1:25-cv-07283 (N.D. Ill.), courtlistener.com/docket/70655954. Tips and documents: legal@reputationransom.com. More: reputationransom.com.
Top comments (0)