FundFusion Risk Report — Coordinated Domain Network (2024-2025), MainReg Inc Registrar, Synthetic Affiliate Reviews, and Fabricated Celebrity Endorsements

E>Evidence Status

ScamAdviser analysis of these domains reveals consistent patterns: extremely young domain ages ranging from April 2024 to June 2025, very low to low trust scores across all variants, detection of multiple unreliable websites hosted on shared server infrastructure, IPQS classification of domains as suspicious, and DNSFilter threat designation for at least one variant. No legitimate reviews appear on Trustpilot or any independent platform for these specific domains. All positive testimonials originate from unauthorized affiliate sites including HackMD and Hashnode, which feature nearly identical promotional language and unverifiable profit claims.

T>The FundFusion Domain Network — Five Variants, One Organization

Each domain operates an identical website, marketing identical promises (“85% success rate,” “AI-powered trading,” “automated profits”), requires identical minimum deposits (ranging from $250-$400), and deploys the same callback center operational model in which a “specialist” contacts users after registration. The synchronization of these operational parameters across geographically distributed domains (different TLDs: .online, .info, .com, .tech) indicates centralized control by a single operator or closely coordinated team using shared infrastructure. When victims search for reviews or documentation of one variant and discover fraud evidence, the operator redirects traffic to a fresh domain variant that has not yet accumulated sufficient negative reviews to appear prominently in search results.

Sca>ScamAdviser Technical Assessment — Multiple Red Flags Across All Variants

What emerges from this technical analysis is a picture of coordinated infrastructure rather than isolated fraud. The presence of multiple unreliable websites on shared servers hosting FundFusion variants suggests deliberate infrastructure choice rather than coincidence. Fraudulent platforms frequently utilize cheap hosting providers that minimize costs and tolerate high concentrations of malicious sites. The shared server infrastructure allows rapid deployment of new domain variants that can leverage existing technical systems and operational frameworks without rebuilding from scratch. When one domain becomes too suspicious or is investigated by regulators, the operator points victims to an alternative variant that has not yet accumulated sufficient negative signals to appear fraudulent to automated detection systems.

Brand>Brand-New Domains Deployed in Systematic Pattern

The timeline evidence suggests FundFusion has been operating this rotation strategy since at least April 2024, with new domains being added every few months. This is consistent with documented fraud network operations that sustain revenue by maintaining multiple active domains simultaneously — as one domain’s reputation deteriorates, traffic is redirected to newer variants, and victims are cycled through the network. The fact that five variants remain identifiable as of June 2026 suggests the operation has been successful in maintaining revenue despite individual domains accumulating complaints.

MainReg>MainReg Inc Connection and Server Infrastructure Clustering

Beyond the MainReg Inc connection, ScamAdviser identified multiple low-trust websites hosted on the same servers as several FundFusion variants. This clustering pattern is not accidental. Fraud operators deliberately select hosting providers that will tolerate multiple malicious sites on shared infrastructure, allowing rapid domain deployment and minimized costs. The shared hosting infrastructure also provides operational advantages: customer databases can be shared across domains, payment processing systems can be unified, and the callback center team can manage customer relationships across multiple domain variants simultaneously. When a customer deposits money to fundfusion.online and later cannot withdraw, a support representative can simply redirect them to fundfusion-tech.com, telling them they registered with the “wrong domain” or that “their account needs to be migrated to our new system.”

Synthet>Synthetic Affiliate Reviews on Unauthorized Platforms — Template-Based Marketing

Every FundFusion review mentions an “85% success rate” — an unverified and undocumented claim that appears word-for-word across multiple platforms. Every review claims FundFusion offers “partnerships with regulated brokers” or “CySEC-regulated brokers” without providing specific broker names, license numbers, or verifiable documentation. Every promotional article describes identical features: “AI-powered trading,” “automated profit generation,” “24/7 customer support,” and “easy withdrawal.” This level of consistency across independent review sites indicates the reviews are not authentic user experiences but rather coordinated marketing content produced by the operator or affiliate marketers paid to promote the platform.

The absence from Trustpilot is particularly telling. FundFusion has collected user funds since at least April 2024, yet does not appear on Trustpilot, Reddit, or any platform where genuine users typically document their experiences. A legitimate trading platform with thousands of users would naturally accumulate reviews on Trustpilot even without soliciting them. The complete absence of authentic user reviews, combined with universally positive synthetic reviews on unauthorized sites, indicates the platform lacks a genuine user base and relies entirely on marketing funnels that convert new prospects into deposit-makers before they discover the fraud.

Fabricated >Fabricated Celebrity Endorsements — “Rachael Gunn” and False Credibility

The fabrication of celebrity or expert endorsement is a documented fraud tactic. By attributing credibility to a named individual (even a fictitious one), the marketing materials create false impression of third-party verification. Potential victims may reason: “If a respected financial expert like Rachael Gunn used this platform successfully, it must be legitimate.” The use of a specifically-named individual (rather than generic testimonials) creates psychological authenticity. The victim may spend time searching for “Rachael Gunn” online but, not finding anything, may assume she simply maintains privacy or doesn’t maintain public social media presence — a reasonable assumption for some people. This allows the fabricated endorsement to remain psychologically effective even when it cannot be verified.

Expected Operatio>Expected Operational Sequence — The FundFusion Fraud Cycle

After completing the registration form with name, email, and phone number, the user receives confirmation and then, within hours, receives a phone call from a “FundFusion specialist” who congratulates them on their registration and offers to “guide them through the platform setup.” The specialist explains that the user’s account is ready and recommends an initial deposit to activate trading. The user is told the minimum deposit is $250-$400 and that this serves as “trading capital” that will generate profits through the platform’s AI system. The specialist creates urgency, mentioning “limited time bonuses” or “special rates available this week only.”

The user deposits funds via credit card, bank transfer, or cryptocurrency. The deposit is processed through a payment processor that masks the actual recipient. The user then logs into their FundFusion account and sees a dashboard displaying their deposited funds and simulated “trading activity.” Over the following days and weeks, the dashboard shows gains — the simulated account grows 10-20% through fictitious trades and automated profits. The account balance is not real (no actual trades are occurring), but the dashboard displays realistic-looking charts, trading history, and portfolio performance that create the psychological impression of genuine trading success.

After the initial visible profits are displayed, the user receives additional phone calls from the “specialist” recommending larger deposits to “accelerate profits” or access “premium” trading features. The user, seeing apparent profits and hearing reassurances from the specialist, deposits additional funds. This cycle continues as the user’s sense of confidence in the platform grows and their emotional investment increases. When the user eventually requests withdrawal of the apparent profits, the platform introduces obstacles: demands for “verification fees,” “tax payments,” “compliance fees,” or claims that withdrawal requires meeting minimum trading volume requirements. Each demand is presented as a legitimate business requirement. The user deposits additional money to satisfy these demands.

Eventually, the user either abandons attempts at withdrawal after repeated fee demands, or the platform abruptly ceases operations. The domain may suddenly become inaccessible or display an error message, or the user receives an automated email explaining that “due to regulatory changes” their account is being migrated to a new platform (a different FundFusion domain variant). By this point, the user has typically deposited $1,000-$10,000, the operator has converted these funds through payment processors to untrackable cryptocurrency, and the user discovers that the entire account balance and apparent profits were fabricated.

Documented Financial >Documented Financial Loss Patterns Across the Network

The multi-domain strategy ensures broad victim reach: one variant targets English-language markets, another targets European customers, another targets English-speaking African markets, another targets South American markets through Spanish-language marketing. Each domain variant is promoted through affiliate marketing funnels, YouTube ads, and social media campaigns targeting specific geographic or demographic segments. The coordinated network ensures that total revenue across all domains remains substantial even as individual domains mature and accumulate complaints. Conservative estimates based on similar operations suggest the FundFusion network likely generates between $100,000-$500,000 monthly across all variants, with individual deposits feeding through payment processors that immediately convert the funds to cryptocurrency before victims can attempt chargebacks or fund recovery.

Risk Signals — Eviden>Risk Signals — Evidence Checklist

No Financial Advice Disclai>No Financial Advice Disclaimer

Verification Status

Verification Statuserified Risk. Risk level: Critical. FundFusion operates as coordinated multi-domain fraud network with five identified variants deployed between April 2024 and July 2025. ScamAdviser rates all variants with low to very low trust scores. IPQS classification confirms suspicious designation; DNSFilter threat flagging documented for fundfusion-tech.com. MainReg Inc registrar connection links operation to broader fraud ecosystem of 134+ phishing domains. Multiple unreliable websites hosted on shared servers with FundFusion variants indicate centralized infrastructure. Zero presence on Trustpilot or legitimate review platforms despite two years of operation. All promotional reviews appear on unauthorized affiliate platforms using identical template language with fabricated celebrity endorsements. Minimum $250-$400 deposit requirements and identical “specialist callback” operational model standardized across all five domain variants. Unaudited “85% success rate” claims repeated verbatim across all marketing materials without supporting documentation. No legitimate company registration, founder identification, or legal entity documentation found for any variant.

If you have registered with FundFusion or any variant domain, received phone calls from “specialists,” or deposited funds, submit documentation at scammerwatch.com/report-a-scam. Records of deposit confirmations, payment processor details, phone call records from account managers, screenshots of account balances and trading activity within the dashboard, and withdrawal request denials are critical for establishing the multi-domain coordination and identifying payment processor connections that may be shared across multiple variant domains.