The domain 9515666[.]com has been setup to conduct an investment scam pretending to be associated to the company Equinor. This scam is using English language. This domain is promoted in four Telegram channels by the Telegram accounts “Pj”,  “Vai na fé ”, and “Leandro Barros”. The promotion started in May 2, 2026. The financial infrastructure used in the scam uses cryptocurrency (TRX and BNB) and local payment methods. The local payment method is PIX which revealed the name of the local company receiving the transaction. The company is "TRANSFERENCIA SEGURA ON-LINE LTDA". The company registration indicates that the management is under "KAYKY RICCI TAVARES"