Technological Audit:

Fake WebSocket Feeds: Their platform uses a modified JSON feed to simulate market movements. While it looks like real-time trading, it’s a closed-loop sandbox.

Domain Obfuscation: The domain was recently registered via a privacy proxy, a common trait for "pop-up" exchanges that disappear once they hit a certain capital threshold.

KYC as Social Engineering: They collect high-res ID documents under the guise of AML compliance. In reality, this sensitive data is likely being harvested for secondary identity theft or sold on dark forums.

Has anyone in the security community developed an automated crawler to flag these "MetaTrader clones" that lack valid server-side certificates from regulated clearing houses?