[Be careful] False referral systems for the phishing domains

[albon]

What happened:: A scammer promoted and published false referral systems for his phishing domains on the forum in different sections that contained a MetaMask connect button and paid registration fees so that those who registered would receive money from the scam referrals system. This scammer also has multiple accounts.

Scammers Profile Link:

[1] https://bitcointalk.org/index.php?action=profile;u=3581176 | FLAG

[2] His Alt: https://bitcointalk.org/index.php?action=profile;u=3581249

Reference Link:

1- coinsage[.]io - https://bitcointalk.org/index.php?topic=5468808.0  | ARCHIVED

2- bnbrocket[.]net  | ARCHIVED

3- moneycraze[.]app - https://bitcointalk.org/index.php?topic=5468825.0 | ARCHIVED



Additional Notes:
They are all new domains. Please be careful not to connect anyone’s wallet to these domains. Please take action regarding the scammer’s topics and his phishing domains. I have tagged this user's accounts.

[1714211420]

1714211420

[1714211420]

1714211420

[1714211420]

1714211420

[1714211420]

1714211420

[hg_away]

This is a new level of phishing links as they will now come to you from someone you know as a referral link. These scammers are creative in their attempt to scam.

[Bitcoin_Arena]

The scammers are not sleeping and always trying to find new ways of pushing their scam to unsuspecting users. OP thanks for the keen observation. I have sent negative feedback to both profiles and supported the flag you created against one of the profiles

I create the second flag for his alt account, just in case he tried to use it to make a new ANN.

https://bitcointalk.org/index.php?action=trust;flag=3216

[Foxy Dragon]

What happened:: A scammer promoted and published false referral systems for his phishing domains on the forum in different sections that contained a MetaMask connect button and paid registration fees so that those who registered would receive money from the scam referrals system. This scammer also has multiple accounts.

Scammers Profile Link:

[1] https://bitcointalk.org/index.php?action=profile;u=3581176 | FLAG

[2] His Alt: https://bitcointalk.org/index.php?action=profile;u=3581249

Reference Link:

1- coinsage[.]io - https://bitcointalk.org/index.php?topic=5468808.0  | ARCHIVED

2- bnbrocket[.]net  | ARCHIVED

3- moneycraze[.]app - https://bitcointalk.org/index.php?topic=5468825.0 | ARCHIVED

https://gcdnb.pbrd.co/images/RoDMAmssTyK5.jpg?o=1

Additional Notes:
They are all new domains. Please be careful not to connect anyone’s wallet to these domains. Please take action regarding the scammer’s topics and his phishing domains. I have tagged this user's accounts.

Shut up NOOBs. You illiterate shitheads always try to prove yourself super smart by shitting with lies. If you have 0.000001% knowledge about anything related to computer and programming you wouldn't say this shit. What kind of dubass are you to say this is a phishing site? Do you have any idea about what really a phishing is? Or you just heard the word "phishing" and trying to act smart? Stupid asshole doesn't even understand what Metamask is saying. Ever heard of Web3? All kind of Web3 DApps require Metamask connection. We aren't asking for users private key THIS IS NO PHISING OR ANY SCAM. THIS IS JUST A FUN REFERRAL GAME. I just changed the name from BNBRocket to Coinsage, stupid asshole also using this to prove a stupid point.

[Foxy Dragon]

The scammers are not sleeping and always trying to find new ways of pushing their scam to unsuspecting users. OP thanks for the keen observation. I have sent negative feedback to both profiles and supported the flag you created against one of the profiles

I create the second flag for his alt account, just in case he tried to use it to make a new ANN.

https://bitcointalk.org/index.php?action=trust;flag=3216

Another stupid dumb monkey following the other stupid monkey. Just show me one proof about phishing. I challenge you. Dumb guy the source code of the whole website is public, why not check the codes before shouting as a band of stupid monkeys? You think yourself god because you have legendary ranks? I shit on your ranks.

[Bitcoin_Arena]

Another stupid dumb monkey following the other stupid monkey. Just show me one proof about phishing.

Do I need to prove to a scammer that his site is a scam? Come on.

You think yourself god because you have legendary ranks? I shit on your ranks.

Looks like we just pissed off yet another scammer  
I love it when I see a scammer get salty. It simply means the scam accusation was on point, we have cut off his only source of income. Get a legitimate job, dunghole and stop living off scamming people.

[Foxy Dragon]

Another stupid dumb monkey following the other stupid monkey. Just show me one proof about phishing.

Do I need to prove to a scammer that his site is a scam? Come on.

You think yourself god because you have legendary ranks? I shit on your ranks.

Looks like we just pissed off yet another scammer  
I love it when I see a scammer get salty. It simply means the scam accusation was on point, we have cut off his only source of income. Get a legitimate job, dunghole and stop living off scamming people.

Scammer wouldn't bother defending his project. And why back off? I made a challenge. Prove it scam.

[albon]

I just changed the name from BNBRocket to Coinsage, also using this to prove a stupid point.

You're a funny kid scammer, and I don't have time to waste with you.
It is not a stupid point. You changed the domain to another domain after your first phishing domain [BNBRocket] was exposed and after your topic related to it was deleted. Why did you put your fun games on 3 new domains with different names, and why do you promote the three domains in the different sections of the forum on different new topics and use alternative accounts?  

Scammer wouldn't bother defending his project. And why back off? I made a challenge. Prove it scam.

Do you defend your project by insulting members? LOL, You are really funny. You can answer my questions above and take a deep breath before you see the following image that will kick your ass out of the challenge.

[Bitcoin_Arena]

Scammer wouldn't bother defending his project.

Over the years in this forum. I have seen a multitude of them do the same thing as you, so, with your approach, I am not surprised. We are not noobs here as you think. Try else where.

And why back off? I made a challenge. Prove it scam.

The proof is right on your site(s). I don't need to waste anytime posting it here. Anyone sensible enough should be able to confirm that it's a scam.

[TheUltraElite]

Scammer wouldn't bother defending his project.

Thief's mother has the biggest mouth.

And why back off? I made a challenge. Prove it scam.

You should go to the corner and ask yourself the reason why you are living if your only concern is to steal money from people who have worked hard for it. If you still dont find remorse, then I am sorry you are beyond saving and need treatment, defenitely not suitable to live the community.

So enjoy you red tags and be afraid that the community here is strong enough to slap you with red trouts whenever needed and leave you sweating at your foiled setups.

Flag supported from my end.

[holydarkness]

Scammer wouldn't bother defending his project. And why back off? I made a challenge. Prove it scam.

Well? Ball is in your court now, albon gave his supporting evidence here. Care to give your rebuttal? Meanwhile, as the evidence is very much damning, here's a support to the flag and a nice addition to that cute small number in red [I always think it's orange, by the way]. Enjoy.

[Foxy Dragon]

I just changed the name from BNBRocket to Coinsage, also using this to prove a stupid point.

You're a funny kid scammer, and I don't have time to waste with you.
It is not a stupid point. You changed the domain to another domain after your first phishing domain [BNBRocket] was exposed and after your topic related to it was deleted. Why did you put your fun games on 3 new domains with different names, and why do you promote the three domains in the different sections of the forum on different new topics and use alternative accounts?  

Scammer wouldn't bother defending his project. And why back off? I made a challenge. Prove it scam.

Do you defend your project by insulting members? LOL, You are really funny. You can answer my questions above and take a deep breath before you see the following image that will kick your ass out of the challenge.

https://gcdnb.pbrd.co/images/bCQzpODUVFrk.jpg?o=1

You again prove that you are a dumbass noob. Else why would you use a stupid tool instead of checking the codes? You can put any unverified contract address and it will return the same risk level. I wrote the smart contract from scratch and I don't want to share my code to public for free, it's my choice. And tell me where is the exposing reference of bnbrocket? I just decided to change the name to match with Forsage. This project was inspired from Forsage. So I did change the name so that existing Forsage users can instantly guess what CoinSage might be. I have even added a auto redirection to Coinsage if someone is vising the old domain. That other project they bought the code from me that's all.


Website codes and Line by Line Explanation:
( view-source:https://coinsage.io/ )

Initial Constants:

Code:

<script>

const contractAddress = '0xf149C5E20331Fc72FEA91a477A495C5c19997272';
const contractABI = [];  // contract's ABI
let contract;
let userAddress;

Initialization of the script. It checks whether a user came by referral link (such as https://coinsage.io/?ref=0xAddress), whether metamask is installed, whether metamask is connected, whether metamask is switched to BNB Network.

Code:

// Initialize web3 and setup contract
async function setup() {
    const referrerX = new URL(window.location.href).searchParams.get('ref');
    if (referrerX !== null && referrerX !== '') {
        document.getElementById('refShow').style.display = 'block';
        document.getElementById('referrerAddress').textContent = referrerX;
    }
    
    if (typeof window.ethereum !== 'undefined') {
        window.web3 = new Web3(window.ethereum);
        await window.ethereum.request({ method: 'eth_requestAccounts' });
        
        document.getElementById('addBnbLink').addEventListener('click', function(event) {
            event.preventDefault();  // Prevents the default action of the link
            addBNBSmartChain();      // Add BNB Network
        });

        // Get chainId
        const chainId = await web3.eth.getChainId();

        // Check chainId to make sure we're on the correct network
        if (chainId === 56) {  // 56 is the chainId for BSC
            contract = new web3.eth.Contract(contractABI, contractAddress);
            userAddress = (await web3.eth.getAccounts())[0];
            document.getElementById('connectButton').style.display = 'none';
            document.getElementById('address').innerText = 'Connected as: ' + userAddress;
            document.getElementById('address').style.display = 'block';
            showDashboard();
        } else {
            addBNBSmartChain();
            alert('Please switch to BNB Smart Chain!');
        }
    } else {
        alert('Please install MetaMask!');
    }
}

Here it loads the dashboard that shows BNB price, various user and earnings data.

Code:

async function showDashboard() {
    const bnbPrice = await getBNBPrice();
    if (bnbPrice === 0) {
        console.log('Failed to fetch BNB price. Showing data in BNB only.');
    }

    const userData = await contract.methods.users(userAddress).call();
    const registered = userData.isRegistered;
    if (registered) {
        const totalReferrals = userData.totalReferrals;
        const totalSubReferrals = userData.totalSubReferrals;
        
        const referralEarnings = web3.utils.fromWei(userData.totalReferralEarnings, 'ether');
        const subReferralEarnings = web3.utils.fromWei(userData.totalSubReferralEarnings, 'ether');
        const totalWithdrawn = web3.utils.fromWei(userData.totalWithdrawn, 'ether');

        const totalEarnings = new Big(referralEarnings).plus(new Big(subReferralEarnings));
        const totalWithdrawableEarnings = totalEarnings.minus(new Big(totalWithdrawn));

        // Now when you need to display the numbers, convert them back to strings
        console.log('Total Earnings: ' + totalEarnings.toString() + ' BNB');
        console.log('Total Withdrawable Earnings: ' + totalWithdrawableEarnings.toString() + ' BNB');

        document.getElementById('totalReferrals').textContent = totalReferrals;
        document.getElementById('totalSubReferrals').textContent = totalSubReferrals;
  
        const totalEarningsBig = new Big(totalEarnings.toString());
        const totalWithdrawableEarningsBig = new Big(totalWithdrawableEarnings.toString());
  
        const totalEarningsUSD = totalEarningsBig.times(bnbPrice).toString();
        const totalWithdrawableEarningsUSD = totalWithdrawableEarningsBig.times(bnbPrice).toString();

        document.getElementById('referralEarnings').innerHTML = `<strong>${referralEarnings} BNB</strong> (${(parseFloat(referralEarnings) * bnbPrice).toFixed(2)} USD)`;
        document.getElementById('subReferralEarnings').innerHTML = `<strong>${subReferralEarnings} BNB</strong> (${(parseFloat(subReferralEarnings) * bnbPrice).toFixed(2)} USD)`;
        document.getElementById('totalWithdrawn').innerHTML = `<strong>${totalWithdrawn} BNB</strong> (${(parseFloat(totalWithdrawn) * bnbPrice).toFixed(2)} USD)`;
        document.getElementById('totalEarnings').innerHTML = `<strong>${totalEarnings} BNB</strong> (${(parseFloat(totalEarnings) * bnbPrice).toFixed(2)} USD)`;
        document.getElementById('AvailableWithdrawal').innerHTML = `<strong>${totalWithdrawableEarnings} BNB</strong> (${parseFloat(totalWithdrawableEarnings * bnbPrice).toFixed(2)} USD)`;
        
        document.getElementById('bnbPriceX').innerHTML = `<strong> 1 BNB =</strong> ${parseFloat(bnbPrice).toFixed(2)} USD`;

        showReferralLink();

        document.getElementById('registrationSection').style.display = 'none';
        
        if (totalWithdrawableEarnings > 0) {
            document.getElementById('withdrawSection').style.display = 'block';
        }
        
        document.getElementById('dashboard').style.display = 'block';
    } else {
        document.getElementById('registrationSection').style.display = 'block';
    }
}

The registration function. It checks if used referral link, checks if referrer address is valid, then calls the registration function in smart contract and that spends exactly 0.05 BNB from metamask (if user approves the transaction).

Code:

async function register() {
    const urlParams = new URL(window.location.href).searchParams;
    const referrer = urlParams.get('ref') ? urlParams.get('ref').trim() : null;
    console.log('User Address:', userAddress);
    console.log('Referrer Address:', referrer);

    try {
        // Ensure that referrer is neither null nor empty nor an invalid Ethereum address
        if (!referrer || !web3.utils.isAddress(referrer)) {
            console.error('Invalid referrer address:', referrer);
            // Use address 0 as the default referrer
            await contract.methods.register('0x0000000000000000000000000000000000000000').send({ 
                from: userAddress, 
                value: web3.utils.toWei('0.05', 'ether'),
                gasPrice: web3.utils.toWei('5', 'gwei')  // Add the gas price here
            });
        } else {
            // Use the provided referrer address for registration
            await contract.methods.register(referrer).send({ 
                from: userAddress, 
                value: web3.utils.toWei('0.05', 'ether'),
                gasPrice: web3.utils.toWei('5', 'gwei')  // Add the gas price here
            });
        }

        // Registration was successful, show a popup
        alert('Registration Successful!');

        // Reload the dashboard
        showDashboard();
    } catch (error) {
        console.error('Registration error:', error);
        // Handle the registration error here
        alert('Registration Failed!');
    }
}

Withdraw function that calls the withdraw function in smart contract. You said it doesn't let users withdraw. DUMBASS.

Code:

async function withdraw() {
    try {
        await contract.methods.withdrawEarnings().send({ 
            from: userAddress,
            gasPrice: web3.utils.toWei('5', 'gwei') // Specifying gas price
        });
        alert("Withdrawal Successful!");
    } catch (error) {
        console.error('Withdrawal error:', error);
        alert("Withdrawal Failed!");
    } finally {
        showDashboard();
    }
}

Handles the referral link if someone is registered.

Code:

function showReferralLink() {
    const referralLinkSection = document.getElementById('referralLinkSection');
    const referralLink = document.getElementById('referralLink');

    // Construct the referral link using the user's address
    const userReferralLink = window.location.origin + '/?ref=' + userAddress;
    
    // Set the referral link in the input field
    referralLink.value = userReferralLink;

    // Show the referral link section
    referralLinkSection.style.display = 'block';
}

function copyReferralLink() {
    const referralLink = document.getElementById('referralLink');

    // Select the referral link text
    referralLink.select();
    referralLink.setSelectionRange(0, 99999); // For mobile devices

    // Copy the text to the clipboard
    document.execCommand('copy');

    // Deselect the text
    referralLink.setSelectionRange(0, 0);

    // Notify the user that the link has been copied
    alert('Referral link copied to clipboard');
}

Function to add BNB chain in metamask if it's not there.

Code:

async function addBNBSmartChain() {
  const provider = window.ethereum;
  if (provider) {
    const chainId = '0x38'; // Chain ID for BNB Smart Chain
    try {
      // Attempt to switch to the specified chain:
      await provider.request({
        method: 'wallet_switchEthereumChain',
        params: [{ chainId }],
      });
    } catch (switchError) {
      // This error code indicates that the chain has not been added to MetaMask:
      if (switchError.code === 4902) {
        try {
          // Attempt to add the specified chain:
          await provider.request({
            method: 'wallet_addEthereumChain',
            params: [{
              chainId,
              chainName: 'BNB Smart Chain',
              nativeCurrency: {
                name: 'BNB',
                symbol: 'BNB',
                decimals: 18
              },
              rpcUrls: ['https://bsc-dataseed.binance.org/'],
              blockExplorerUrls: ['https://bscscan.com/']
            }],
          });
        } catch (addError) {
          console.error('An error occurred while attempting to add the network:', addError);
        }
      } else {
        console.error('An unexpected error occurred:', switchError);
      }
    }
  } else {
    console.error('Can\'t setup the BNB Smart Chain because window.ethereum is undefined');
  }
}

Fetches BNB price from coingecko.

Code:

async function getBNBPrice() {
  try {
    const response = await fetch('https://api.coingecko.com/api/v3/simple/price?ids=binancecoin&vs_currencies=usd');
    const data = await response.json();
    return parseFloat(data.binancecoin.usd);
  } catch (error) {
    console.error('Error fetching BNB price:', error);
    return 0;
  }
}

// Call setup on page load
window.onload = setup;
    </script>

WHERE IS THE PHISHING AND WHERE IS THE SCAM?  

[holydarkness]

[...]
WHERE IS THE PHISHING AND WHERE IS THE SCAM?  

Ok, while the technical issue being discussed here with albon, let's give you a benefit of doubts and talk about your project details, first, let's archive your website --CoinSage, MoneyCraze-- just in case, although the screenshots on the opening post had pretty much documented everything.

Tell me, this... project, the only thing it offer is registering to the "platform" and pay 0.05 BNB to the contract, i.e. to you, and nothing else? There's nothing to trade, no purpose, literally nothing to do other than pay you and then sit and wait?

[Foxy Dragon]

[...]
WHERE IS THE PHISHING AND WHERE IS THE SCAM?  

Ok, while the technical issue being discussed here with albon, let's give you a benefit of doubts and talk about your project details, first, let's archive your website --CoinSage, MoneyCraze-- just in case, although the screenshots on the opening post had pretty much documented everything.

Tell me, this... project, the only thing it offer is registering to the "platform" and pay 0.05 BNB to the contract, i.e. to you, and nothing else? There's nothing to trade, no purpose, literally nothing to do other than pay you and then sit and wait?

No problem, you can archive the websites. And I have already told you, I was inspired by Forsage. That forsage thing went viral in my area so I thought to give it a try by launching a similar platform. You can see forsage has millions of users and billions of payouts. It's a referral chain, you register and then invite people and you earn commission from their fees. There is nothing else at the moment. I'm currently thinking about adding some more interesting ways to earn from the website like faucet or similar thing. But while I am thinking of improvements I am being called as scammer here and the website as phishing site for no reason. If I was scammer then I wouldn't care but I'm not scammer so I will defend myself everytime I am falsely being accused.

[Latviand]

Looks like we just pissed off yet another scammer  
I love it when I see a scammer get salty. It simply means the scam accusation was on point, we have cut off his only source of income. Get a legitimate job, dunghole and stop living off scamming people.

I mean when your lies get exposed and you have no way of covering it up, won't you do the same? Get so angry that they lose focus on you so you can continue your scam and hopefully they forget what this is all about and focus on the madness that you're doing? Anger definitely is a big sign of someone's guilt although it's not going to be most of the time. Nice catch OP, first I've heard of this kind of scheme.

[Foxy Dragon]

Looks like we just pissed off yet another scammer  
I love it when I see a scammer get salty. It simply means the scam accusation was on point, we have cut off his only source of income. Get a legitimate job, dunghole and stop living off scamming people.

I mean when your lies get exposed and you have no way of covering it up, won't you do the same? Get so angry that they lose focus on you so you can continue your scam and hopefully they forget what this is all about and focus on the madness that you're doing? Anger definitely is a big sign of someone's guilt although it's not going to be most of the time. Nice catch OP, first I've heard of this kind of scheme.

No point to argue with fools anymore.

[holydarkness]

[...]
WHERE IS THE PHISHING AND WHERE IS THE SCAM?  

Ok, while the technical issue being discussed here with albon, let's give you a benefit of doubts and talk about your project details, first, let's archive your website --CoinSage, MoneyCraze-- just in case, although the screenshots on the opening post had pretty much documented everything.

Tell me, this... project, the only thing it offer is registering to the "platform" and pay 0.05 BNB to the contract, i.e. to you, and nothing else? There's nothing to trade, no purpose, literally nothing to do other than pay you and then sit and wait?

No problem, you can archive the websites. And I have already told you, I was inspired by Forsage. That forsage thing went viral in my area so I thought to give it a try by launching a similar platform. You can see forsage has millions of users and billions of payouts. It's a referral chain, you register and then invite people and you earn commission from their fees. There is nothing else at the moment. I'm currently thinking about adding some more interesting ways to earn from the website like faucet or similar thing. But while I am thinking of improvements I am being called as scammer here and the website as phishing site for no reason. If I was scammer then I wouldn't care but I'm not scammer so I will defend myself everytime I am falsely being accused.

For the record and to be sure, though you've said it repetitively, you're inspired by a project that's notoriously known for its ponzi scheme, stealing 340 millions of USD from their participants victims, and was indicted by an authority of one country?

[Foxy Dragon]

[...]
WHERE IS THE PHISHING AND WHERE IS THE SCAM?  

Ok, while the technical issue being discussed here with albon, let's give you a benefit of doubts and talk about your project details, first, let's archive your website --CoinSage, MoneyCraze-- just in case, although the screenshots on the opening post had pretty much documented everything.

Tell me, this... project, the only thing it offer is registering to the "platform" and pay 0.05 BNB to the contract, i.e. to you, and nothing else? There's nothing to trade, no purpose, literally nothing to do other than pay you and then sit and wait?

No problem, you can archive the websites. And I have already told you, I was inspired by Forsage. That forsage thing went viral in my area so I thought to give it a try by launching a similar platform. You can see forsage has millions of users and billions of payouts. It's a referral chain, you register and then invite people and you earn commission from their fees. There is nothing else at the moment. I'm currently thinking about adding some more interesting ways to earn from the website like faucet or similar thing. But while I am thinking of improvements I am being called as scammer here and the website as phishing site for no reason. If I was scammer then I wouldn't care but I'm not scammer so I will defend myself everytime I am falsely being accused.

For the record and to be sure, though you've said it repetitively, you're inspired by a project that's notoriously known for its ponzi scheme, stealing 340 millions of USD from their participants victims, and was indicted by an authority of one country?

The OP here promotes betting site. Isn't betting worse than ponzi? And I just liked the referral scheme and wanted to make a simpler + fully automated version of it.

[Doan9269]

Are people still running after making it with the referral system and their bonus as before, isn't the risk involved enough for them to find time on other better things than running a race after what is not being profitable by all means, maybe we cannot blame them because some are so used to the kind of gambling referral system in other to attract a bonus reward but in dealing with real coins, this does not really matters, the risk is far higher than the benefits.

[holydarkness]

The OP here promotes betting site. Isn't betting worse than ponzi? And I just liked the referral scheme and wanted to make a simpler + fully automated version of it.

Let's stay focused on your project here, shall we? So, to summarize, your project is a ponzi scheme, modelled after a notorious platform that scammed 340 million USD, and it offers no other purpose than that? Of course, not mentioning [hopefully] brings you some bags of fortune on its process through the sign-up fee.