Bitcoin Forum

Economy => Scam Accusations => Topic started by: Yaunfitda on October 31, 2020, 01:19:47 PM



Title: [Scam]: Fake Curve.Fi website
Post by: Yaunfitda on October 31, 2020, 01:19:47 PM
What happened: Fake and clone Curve.Fi website

Website:
Code:
https://curve.si/

Archived: https://archive.is/nPqW0

https://i.imgur.com/Se49vhv.png

Quote
Registrant    NOT DISCLOSED
Registrar    EPAG Domainservices GmbH
IANA ID: —
URL: https://www.epag.de
Whois Server: —
Registrar Status    ok
Dates    10 days old
Created on 2020-10-21
Expires on 2021-10-21
   
Whois History  
Name Servers    DNS1.STORM-PRO.NET (has 727 domains)
DNS2.STORM-PRO.NET (has 727 domains)
DNS3.STORM-PRO.NET (has 727 domains)
DNS4.STORM-PRO.NET (has 727 domains)
   
  
Tech Contact    NOT DISCLOSED
IP Address    193.233.15.180 - -1 other site is hosted on this server

Real website: https://www.curve.fi/


Title: Re: [Scam]: Fake Curve.Fi website
Post by: TalkStar on October 31, 2020, 01:58:18 PM
They have purchased the domain cleverly and at first look "s" looks like "f". Even they are using real website url on their favicon area to make visitor believe that its the real one. I have checked their telegram and interesting thing is that they are using the link of real telegram channel.




Title: Re: [Scam]: Fake Curve.Fi website
Post by: Yaunfitda on November 13, 2020, 09:26:30 PM
What happened: Fake Curve site

Website:
Code:
https://curve.run/

Archive: https://archive.is/8kAce

https://i.imgur.com/aXWTJiv.png

Quote
Whois Record for Curve.run
Registrant    REDACTED FOR PRIVACY
Registrant Org    See PrivacyGuardian.org
Registrant Country    us
Registrar    NameSilo, LLC
IANA ID: 1479
URL: http://www.namesilo.com
Whois Server: www.namesilo.com/whois.php

(p)
Registrar Status    clientTransferProhibited
Dates    13 days old
Created on 2020-10-31
Expires on 2021-10-31
Updated on 2020-11-05    
  
Name Servers    NS1.CYBERCASTCO.COM (has 1,222 domains)
NS2.CYBERCASTCO.COM (has 1,222 domains)
   
  
Tech Contact    REDACTED FOR PRIVACY
REDACTED FOR PRIVACY,
REDACTED FOR PRIVACY, REDACTED FOR PRIVACY, REDACTED FOR PRIVACY, REDACTED FOR PRIVACY
(p) (f)
IP Address    190.97.166.32 - 8 other sites hosted on this server


Title: Re: [Scam]: Fake Curve.Fi website
Post by: Yaunfitda on November 22, 2020, 08:47:36 PM
What happened: Fake Curve Website

Website:
Code:
 https://curves.fi/

Archived: https://archive.is/4HyjE

https://i.imgur.com/fN3thk9.png

Quote
Dates    316 days old
Created on 2020-01-11
Expires on 2021-11-01
Updated on 2020-11-02    
  
Name Servers    DORA.NS.CLOUDFLARE.COM [OK] (has 18,395,021 domains)
PORTER.NS.CLOUDFLARE.COM [OK] (has 18,395,021 domains)
   
  
Tech Contact    —
IP Address    104.28.16.195 - 545 other sites hosted on this server
   
  
IP Location    United States Of America - California - San Francisco - Cloudflare Inc.
ASN    United States Of America AS13335 CLOUDFLARENET, US (registered Jul 14, 2010)
IP History    1 change on 1 unique IP addresses over 0 years    
  
Hosting History    4 changes on 4 unique name servers over 6 years    
  
Website
Website Title    None given.    
  
Whois Record ( last updated on 2020-11-22 )


Title: Re: [Scam]: Fake Curve.Fi website
Post by: TheUltraElite on November 23, 2020, 04:51:42 AM
These impersonation domains will always be a problem with the internet era. No way to stop them except being careful and bookmarking important sites. Worse is that people often don't check sites and visit them without checking, use older browser models that don't warn on phishing sites.

They also follow the trends. Like now it's defi previously it was Libra and so on.

Good job posting it here. Hoping some people find it before getting scammed and not after.


Title: Re: [Scam]: Fake Curve.Fi website
Post by: Yaunfitda on November 27, 2020, 10:20:40 PM
What happened: Fake Curve Website

Website:
Code:
http://curves.exchange/

https://i.imgur.com/0OZLgfu.png

Archived: https://archive.is/1M3N8

Quote
Registrant    REDACTED FOR PRIVACY
Registrant Org    Data Protected
Registrant Country    ca
Registrar    Tucows Domains Inc.
IANA ID: 69
URL: http://www.tucows.com
Whois Server: whois.tucows.com

(p)
Registrar Status    clientTransferProhibited, clientUpdateProhibited
Dates    20 days old
Created on 2020-11-07
Expires on 2021-11-07
Updated on 2020-11-12    
  
Name Servers    JULE.NS.CLOUDFLARE.COM (has 18,273,647 domains)
LAKAS.NS.CLOUDFLARE.COM (has 18,273,647 domains)
   
  
Tech Contact    REDACTED FOR PRIVACY
REDACTED FOR PRIVACY,
REDACTED FOR PRIVACY, REDACTED FOR PRIVACY, REDACTED FOR PRIVACY, REDACTED FOR PRIVACY
(p) (f)
IP Address    104.31.70.180 - 537 other sites hosted on this server


Title: Re: [Scam]: Fake Curve.Fi website
Post by: Furious 7 on November 27, 2020, 11:48:57 PM
Good research your friends have taken a lot of time to keep investigating this case with the same name but different domains.

And scamer always has many ways with those who want, including with Curve which continues to be the target so that the victims are sure of what they are doing, so stay alert.

Once again your work is very appreciated.


Title: Re: [Scam]: Fake Curve.Fi website
Post by: Yaunfitda on November 29, 2020, 09:35:15 PM
Good job posting it here. Hoping some people find it before getting scammed and not after.

Once again your work is very appreciated.

Thank you very much for your kind words, I will still hunt more curve scams and exposed it here so that they won't victimized our members here, hopefully.

They are targeting curve, this kind of liquidity pool are easy target for scammers because of the current hype and people might not be doing any research and perhaps can fall for this fake websites.