We have already handled this case. The site no longer responds, but the domain stays registered until 2027: that is where you look for whoever is behind it. And anyone who paid in 2024 does not have a closed case. If it happened to you, write to us using the form at the bottom of this page.
Please note: we are a law firm and we deal exclusively with online fraud cases. If you would like our help, you can contact us by filling in the form at the bottom of this article.
We have already handled this case and we can help people who fell into the same trap. cpgains.com is a scam, and it is the site that came first. The same person who brought us the cpfxtm.com file had previously been trading on a terminal reachable at webtrader.cpgains.com. Then they moved him. Eighty thousand euros in all.
Today cpgains.com no longer responds
We tried to open the site in November 2026. It does not open. In its place a technical message appears: error 525, SSL handshake failed.
It is worth explaining what that means, because it tells you a great deal.
The domain still exists: it is registered, the name servers answer, and the service acting as a filter in front of the site answers too. What is no longer there is the real server, the one that is supposed to hold the pages. The filter tries to connect, fails, and returns the error.
In plain words: the sign is still hanging, the shop behind it has been emptied.
This is not an accident. It is the ordinary moment in the life cycle of a platform of this kind: the server is switched off when the campaign is over, the domain is left registered until it expires, and business reopens elsewhere.
cpgains.com: what is still switched on
Here is the part that matters to anyone who has to file a complaint.
The cpgains.com domain is not about to lapse: the registration runs until August 2027. And the domain still has email configured on a paid corporate service from a large international provider, complete with domain verification with that same provider.
In other words: the website is dead, but the @cpgains.com email addresses may still be alive, and above all there are two parties holding data on whoever bought and configured all this.
The first is the registrar, the United States company with which the domain was registered on 7 August 2024. The second is the mail provider. Both keep, for each account: who paid, by what method, from which network addresses it was accessed, and with what contact email.
These data are not obtained by writing an angry email. They are obtained through a request from the judicial authority, and to make one you need a criminal complaint. It is one of the reasons we always repeat the same thing: a complaint is not only for you, it is what sets those requests in motion.
And there is a deadline. When a domain is abandoned and allowed to lapse, the registration data can no longer be queried in the same way after a while. August 2027 is the window.
cpgains.com: two years of victims, not one
There is one fact in the file that almost goes unnoticed and which is in fact the most important of all.
cpgains.com was registered on 7 August 2024. The person who came to us fell into it two years later.
That means that between 2024 and 2026 that site was working, had a live trading terminal and had other clients. There is no reason to think it was switched on and then left to rest.
If you paid money to cpgains.com in that period — including in 2024, even if it feels like too long ago, even if you did not report it at the time — your case is not closed. Computer fraud offences carry long limitation periods and, above all, complaints concerning the same platform end up being joined: ten separate files are ten weak cases, ten files on the same domain are an investigation.
Frankly, we are writing this article for those people too.
The move: the fact that counts more than any technical analysis
In the file the sequence is this: first webtrader.cpgains.com, then webtrader.cpfxtm.com. Same person, same contacts, new address.
It is the moment when a fraud of this kind reveals itself, and almost nobody notices while it is happening. A legitimate operator does not change the domain under the client's feet. If your «platform» changes address, if a new link arrives, if you are told the system has been updated and that from now on you log in somewhere else, that is the same thing we saw in the globalnbcfinance.com case: it is not an update, it is a removal van.
What we will not claim
We prefer to say it ourselves, before a defence lawyer does.
Technically the two domains are not linked. cpgains.com and cpfxtm.com were registered with the same United States registrar, but two years apart, and they rely on the same large filtering service — which, however, has tens of millions of customers, so in itself it means nothing.
Above all: the two domains point to different pairs of name servers. On that service the assigned pair is tied to the account, so different pairs in all probability indicate two distinct accounts. We write this down rather than hiding it.
The link between cpgains.com and cpfxtm.com is not technical. It is lived: a real person was moved from one to the other by the same contacts, in the same conversation, without interruption. In a courtroom that fact, documented by the messages, is worth more than any coincidence of servers.
It is the same approach we applied in horstman-group.com, where we explained why certain technical clues prove less than they appear to.
And the authorisation?
The site that took the place of cpgains.com states in its own footer that it operates under a licence issued by an offshore authority in the Comoros islands. We explained in the article on cpfxtm.com why that statement does not hold: the Central Bank of the Comoros has described as «fictitious structures» the bodies claiming to issue financial licences in that country and, in any event, no Comorian licence authorises anyone to offer investment services in Italy.
What cpgains.com itself said about its own status we can no longer read, because the site does not respond. And that is exactly the reason for the paragraph that follows.
If you still have access to a site like cpgains.com, save everything now
This applies to anyone reading with a doubtful platform still open on their phone.
Take the screenshots today. The balance screen, the contact page, the footer with the company details, the messages, the transfer instructions, the exact address of the site in the bar. When the server is switched off, all of this disappears in an afternoon, and nobody gives it back to you.
Save the emails, with full headers, not by copying and pasting the text.
Note the dates: when they contacted you, when you paid, when they changed the address of the site on you.
Ask your bank for full traceability of every transfer: destination IBAN and account holder, receiving bank, country, date and time.
A case file is built out of that. Not out of memory.
What to do straight away
Pay no more money, on any pretext and into any account, not even one bearing your own name.
Do not pay in order to withdraw. Requesting a withdrawal is free. If, to get your own money back, you are asked for a tax, a commission or a paid verification, that request is the fraud continuing.
File the criminal complaint, attaching what you have saved.
If you installed remote assistance software, reset or replace the device and declare it.
Be wary of anyone promising recovery. After a fraud come the fake recovery agents: we have written about them in eccfinvestigators.com and in apexroutecloud.com.
Similar cases we have handled
- cpfxtm.com: the foreign account in your own name
- coinupy.com: the domain that expires
- verifiaction-department.info: a domain with no website
- megachaint.com: 110,000 euros in three waves
- revexglobal.net: five domains, five providers
A warning that concerns us
We are aware that someone is telephoning defrauded people using the name of our firm. We never call on our own initiative, we do not telephone in the evening or at night, we do not use foreign numbers and we never ask for money over the phone. If you receive a call like that, hang up and write to us through the form on this site.
If it happened to you, write to us
If you paid money to cpgains.com — in any year, including 2024, even if they later moved you elsewhere — fill in the form at the bottom of this page. Give the dates, the amounts, the exact address of the platform you were trading on and whether you were asked to change it.
A switched-off site is not a closed case. It is only a case whose shop window has been taken away. We read every request and we reply.
Do you need legal assistance?
Tell us about your case: free assessment, no obligation.
