236,000 DCloud Uni-App Sites Fuel Crypto Scams

Robert Moore · 2026-06-29

New findings from Infoblox reveal that over 236,000 websites are using investment scam templates built with a legitimate Chinese open-source, cross-platform app development framework called DCloud Uni-App. These templates power fake cryptocurrency exchanges, multi-language pig-butchering operations, WhatsApp phishing networks, bogus gambling platforms, and brand impersonation schemes. It's a massive operation that's been flying under the radar for too long. ### What Exactly Is DCloud Uni-App? DCloud Uni-App is a real, open-source framework used by developers to build apps that work across iOS, Android, and the web. Think of it like a Swiss Army knife for developers—it's versatile and efficient. But scammers have twisted it into a tool for theft. They take these pre-built templates, slap on a fake crypto exchange or phishing page, and launch attacks that look surprisingly legit. It's like using a perfectly normal hammer to break into someone's house. ### The Scale of the Problem Infoblox found over 236,000 sites using these scam templates. That's not a small operation—it's a sprawling network. These sites aren't just one-off scams; they're part of a coordinated effort. Many are multi-language, targeting victims in the US, Europe, and Asia. Some even mimic well-known brands to trick you into handing over your crypto wallet keys. It's a global mess. ### How the Scams Work Here's a quick breakdown of the common tactics: - **Fake cryptocurrency exchanges**: These sites look like Binance or Coinbase but steal your login and funds. - **Pig-butchering operations**: Scammers build trust over weeks, then convince you to invest in a fake platform. - **WhatsApp phishing networks**: They send messages with links to these scam sites, often pretending to be friends or support. - **Brand impersonation**: They copy logos and layouts of trusted companies to make you let your guard down. Each template is designed to look professional, with polished interfaces and fake testimonials. It's like a storefront that looks real from the street but is empty inside. ### Why You Should Care If you're in the US, these scams hit close to home. The FBI reported that crypto investment fraud cost Americans over $3.9 billion in 2023. That's real money lost by real people. Antidetect browsers can help you spot these fakes—they reveal hidden redirections and block known scam domains. But awareness is your first line of defense. ### Protecting Yourself Here are a few simple steps: - **Check the URL**: Scam sites often have typos or extra characters. Look for "coinbase" instead of "coinbase." - **Use a trusted browser**: Stick with Chrome or Firefox with security extensions. - **Avoid unsolicited links**: If someone on WhatsApp sends you a "great investment opportunity," it's likely a scam. - **Verify with official sources**: Go directly to the company's website, not through a link. ### The Bottom Line Over 236,000 scam sites is a wake-up call. DCloud Uni-App is a legitimate tool, but it's been hijacked by bad actors. Stay sharp, double-check everything, and never trust an investment that sounds too good to be true. Your wallet will thank you.