Private external findings / Burger King IndiaOuttake connected an active Burger King India impersonation portal to a broader multi-brand franchise-fraud network through shared hosting, registration timing, certificates, cPanel infrastructure, repeated forms, and template reuse. Nothing of RBI's was compromised. This is external impersonation.
The report supports a single-operator assessment across nine campaign domains. Five nodes were deep-scanned. Four remain unverified and are included on co-hosting and naming pattern only.
An active franchise application portal used Burger King identity and a generic WordPress stack to collect personal information from prospective investors. No RBI or franchisee system compromise was observed.
The seed and four related nodes were assessed malicious. Four additional nodes were parked as high-priority leads because direct same-operator evidence was not yet established.
The Nike-themed site contained embedded Nykaa franchise imagery, supporting the report’s conclusion that one content base was duplicated across unrelated brand impersonation sites.
The graph shows only supported relationships. Per-edge confidence is omitted because the flattened report does not reliably map each weight to a specific edge.
Nine brand-franchise domains were registered on 14 Aug 2026 and deployed through shared providers and a repeated stack.
Brand logos, investment tiers, and corporate identity cues were swapped into a reusable template.
Prospective franchise investors reached the fraudulent portals through search or social referral.
The application form collected contact, location, occupation, and investment-plan information.
The report infers later requests for fees, KYC documents, or further financial information. This step was not directly observed.
The report maps infrastructure concentrations as intelligence. It does not prescribe a ranked takedown plan. Recommendations remain separate from factual coverage.
Enumerate the two cPanel accounts through Certificate Transparency pivots.
Deep-scan the remaining four nodes to complete or constrain the campaign map.
Cross-check the GTM container across all nine sites.
Enumerate the naming pattern across additional Indian consumer brands and RBI’s other brands.
Review the evidence, the open attribution questions, and how Outtake can extend the same autonomous workflow across RBI’s external surface without overstating remediation or outcome.
