From the analysis published a few months ago, believed to be the reason the operation was would up: https://web.archive.org/web/20210608102417/https://webcache

From the analysis published a few months ago, believed to be the reason the operation was would up: https://web.archive.org/web/20210608102417/https://webcache.googleusercontent.com/search?q=cache:bP-g6VgD1JcJ:https://anomexposed.wordpress.com/2021/03/29/anom-encrpted-scam-exposed/+&cd=1&hl=en&ct=clnk&gl=au https://web.archive.org/web/20210608102417/https://webcache.... All the data was sent to some sever in Bucharest.