FBI seized ‘web3adspanels.org’ hosting stolen logins

The U.S. authorities seized the domain web3adspanels[.]org and its database, which had been used by a criminal group to store thousands of stolen bank login credentials obtained from victims via fraudulent websites that mimicked real bank ads. Victims who clicked on the fake ads were directed to controlled sites, and the captured credentials were then used to access real bank accounts and steal funds.

The press release from The Justice Department states that the seizure came after the scheme involved bank account takeover and follows an FBI alert to the public about impersonation-based fraud. The FBI identified at least 19 U.S. victims, including two Georgia companies, with losses around $14.6 million and potential losses of $28 million.

Estonian authorities preserved data from servers hosting phishing pages and credentials, and the operation noted that the domain was still hosting stolen login data as recently as November 2025. Since January, the IC3 received over 5,100 complaints totaling more than $262 million in losses.