Two blocked brokers. One website. We read both homepages side by side

Between February and June 2026, Italy's regulator ordered internet providers to block two dozen broker websites. We read the survivors. Two of them are the same website in two languages, heading for heading, and the pattern behind them explains why a warning about one brand tells you nothing about the next.

Between February and June 2026, CONSOB ordered Italian internet providers to block two dozen broker websites. We pulled every resolution, extracted all 39 domains, and checked which were still alive on 18 September 2026. Sixteen were gone. Of the ones still running, two turned out to be the same website with different names on it.

Why Italy is the useful regulator here

Most authorities publish a warning and stop. CONSOB does something else: under article 7-octies of legislative decree 58/1998 it can order Italian internet service providers to block a site outright. Each order is a numbered resolution naming the exact domains.

That gives a researcher two things nothing else does. A numbered, dated citation for every firm. And, crucially, every domain the operation was using, including the one where clients actually deposit, which the marketing site usually never mentions.

The two that are the same

Orbisolyx was blocked under resolution 24002 on 18 May 2026. Auralyex was blocked under resolution 23999 in the same sitting. One presents in English, one in Italian.

Here is every section heading on each homepage, in the order they appear:

The opening paragraphs match as well. Orbisolyx: “Online trading isn’t what it once was. With services like Orbisolyx, traders can access a wide range of functions to trade with ease.” Auralyex: “Il mondo del trading online è cambiato notevolmente. Ora i trader hanno accesso a un’ampia gamma di funzionalità che li aiutano a operare in modo fluido ed efficace.”

So does everything around them. Both serve the homepage from /en/home and /it/home rather than the root. Both footers read “Copyright © 2025 [brand] All rights reserved”, in the same format, with the same year. Both homepages run to between 1,500 and 1,800 characters in total. Both brands are invented Latinate words ending in -yx.

And one of them was not finished. Auralyex’s /en/home page serves Italian text. The English route exists and the content behind it was never translated. That is what a hurried clone looks like: copy the template, change the brand, skip the check.

The part that defeats the standard advice

Every guide on broker safety, including ours, tells you to check the domain. These operations have already adapted to that.

CONSOB names two addresses for each firm. The marketing site, and the place you actually log in and deposit:

Possares-renoyx. Grumblinion-radiex. These are not words. They contain no brand name. They exist so that the domain holding the money is one nobody searches.

Think about how the check actually fails. A cautious person lands on the marketing site, searches the brand, finds nothing alarming, and signs up. They click through to the account area, and the address bar changes. Almost nobody re-reads it at that point, and almost nobody searches the new string. The marketing domain can be burned and replaced without touching the portal, or the reverse.

The MRX Capital Trading row is the clearest illustration. CONSOB names only the portal. By the time the regulator acted, the marketing site that fed it had already gone, and the deposit domain was still running.

The other shape: nine brands, one naming convention

Across two sittings two weeks apart in February 2026, CONSOB blocked nine firms that all used the identical structure of a marketing domain plus client.<brand>.com:

A shared naming convention is weaker evidence than a shared template, and we are labelling it as what it is: a pattern in how these sites are built, not a proven common owner. But it tells a reader something useful either way. Nine brands, one architecture, blocked inside three months.

CONSOB drew its own conclusion in April. Resolution 23938 of 2 April 2026 blocked ten firms in a single act: Fxcalle, Fint-xpert, Primevaultfx, Trade-zonex, Bravonexmarkets, Avantcapitaltrade, Alchemyxmarkets, Capibullmarket, Truenorthoptions and Skylinefx. Regulators bundle ten separate brands into one resolution when they are looking at one problem, not ten.

What Germany’s regulator says, and what it carefully does not

BaFin published three grouped warnings in early 2026, and the wording repays attention because it shows a regulator being precise about what it can prove.

Note what BaFin says and does not say. It groups them, and it describes the websites as near-identical. In none of the three notices does it say the sites share an operator, an owner or a template.

That distinction matters, and we are keeping it. “BaFin grouped these under one warning as near-identical websites” is accurate. “BaFin says one operator runs them all” is not, and you will see it written that way elsewhere.

It is also why the Auralyex and Orbisolyx finding is worth more than a regulator’s grouping: you can check it yourself, in two browser tabs, in about a minute.

The March series is doing something else entirely

The seven firms in BaFin’s 6 March notice are not generic shells. Each one is paired with a real, named investment fund whose identity it is borrowing:

Read the left column as a set of prefixes: ALPHA, AXA, VT, MFS, Q. Each fake name is built from a real fund’s first syllable with a trading suffix bolted on, and each calls itself a “(UK) Limited” to complete the impression.

Two of the seven, VONTRADE and VECTRADX, impersonate the same genuine fund. A seventh domain, qbitrex.com, appears in BaFin’s table with no firm name and no fund attached to it, which is what an entry looks like when the template got deployed before the story around it was finished.

What all of this means for checking a broker

The single most common piece of advice about unregulated brokers is to search the name for warnings. That advice is not wrong and it is no longer sufficient, for three reasons this investigation makes concrete.

1. The brand is disposable. Two blocked brands here are one website. A warning about Auralyex tells a visitor to Orbisolyx nothing, and the next clone is a find-and-replace away.
2. The domain you check is not the domain that takes the money. Five firms in these resolutions deposit through a host with no brand relationship at all, and one of them had already abandoned its marketing site by the time the regulator caught up.
3. Blocking is national. A CONSOB order makes these sites unreachable from Italy. Every one of them stayed reachable everywhere else, which is why we could read two of them four months later.

So the check that actually works is narrower and more mechanical than “search the name”:

• Copy the domain out of the address bar, suffix included, and search that exact string alongside the word warning. Not the brand. The string.
• Do it again after you click through to the account or deposit page. If the domain changed, that is the one holding your money, and it is the one to search.
• Paste a distinctive sentence from the homepage into a search engine, in quotation marks. If it comes back on other brokers’ sites, you are looking at a template. This is how Auralyex and Orbisolyx give themselves away, and it costs ten seconds.
• Ask for the company name, the registration number, the country of incorporation and the licence number. Every genuine firm publishes all four. Not one of the firms in this investigation publishes any of them.

Sources

• CONSOB resolutions 23848, 23849, 23850, 23851, 23852, 23853, 23869, 23870, 23871, 23872, 23896, 23938, 23998, 23999, 24002, 24003, and the June 2026 batch (24031, 24033, 24034, 24035, 24037), read on consob.it
• BaFin consumer warnings of 6 February, 4 March and 6 March 2026, read in German and English on bafin.de
• auralyex.co and orbisolyx.com, read directly on 18 September 2026
• Domain liveness checked by DNS on 18 September 2026

Our scoring method is at the methodology page, and every broker we have rated is at the full list.