A $25 template helped scammers build hundreds of phantom bank domains

Allure Security discovered a large cluster of fraudulent "phantom bank" websites—roughly 2,200 domains identified, ~1,095 reachable and 838 containing a shared phrase—built from a low-cost Cuex front-end template and Laravel backend to create believable banking portals. The sites share telltale artifacts (a recurring typo “Curreny Charts”, shared paths, matching cookies, and forms posting to the same external endpoints) and are likely used to support romance, broker, loan-recovery, and delivery scams; researchers recommend checking these indicators, independently verifying institutional claims, and preserving pages and metadata for investigations.