Skip to main content
← All cases
Public evidence corpus · active investigation

Wiener-Gate

A multi-brand online pet-purchase fraud network, documented as a criminal supply chain rather than a single suspect.

operations active Version 1.0 · August 2026 · point-in-time snapshot
Hashed corpus 140 original collected files
Site captures 104 files, four live sites
Evidence log ~3,200 lines, sections A–Z
FB account clusters 38 by media-ID grouping
Brand identities 8 breeder & rescue framings

This is the public layer of a working investigation into a network that sells puppies that do not exist. The private record does not ship. What ships is the infrastructure findings, the registry timeline, the template artifacts, the stolen-image provenance analysis, the methodology, and every hash needed to check the work — filtered through a binding redaction contract, with every load-bearing claim carrying a reference like (Z-7), (U-4), (R-1).

It is a supply chain, not a person

DOCUMENTED

Templates, aged Facebook pages, payment fronts, and courier kits are sold separately and assembled by whoever rents them. Looking for "the guy" is the wrong shape of question. The chokepoints are the vendors, the registrars, and the platforms.

The operators left the receipts in place

DOCUMENTED

One shipping site publishes its template vendor’s demonstration credentials on a public page and ships the string (demo) in its footer in English and German (T-1, S-2, T-9). Eleven images were uploaded in a 93-minute session finishing 34 minutes before the domain was registered (U-4).

The same invented people keep appearing

DOCUMENTED

A testimonial persona named "Priya" appears four times across three domains on two separate hosting stacks, alongside "James" and "Sarah M." (Q-5, S-3, T-3, U-7). Content-layer linkage is what connects the storefronts; infrastructure linkages failed every test.

It rebuilds faster than reports can be filed

DOCUMENTED

Storefront domains are replaced every four to ten weeks. Three domains named in the earlier evidence are already gone from the registry (R-1, R-2). A second shipping front was stood up while this investigation was running (S-1).

What this record does not claim
That any victim paid the bank account the operators solicited On 2026-08-25 the operators sent bank details to the investigator and asked for a wire. It is not established that any victim ever sent money to that account (Z-12, Z-18)
A total dollar loss The corpus does not support an aggregate figure. The argument is productization and a measurable deployment count, not a number (D13, Z-18)
That any named person is an operator Every identity this network has displayed has turned out to be stolen or fabricated. See Who is NOT a suspect