Thousands of malicious domains for investment scams are crossing Europe. What do they offer and how to spot them quickly?