Bitcoin Forum

Other => Beginners & Help => Topic started by: Yaunfitda on April 14, 2020, 08:02:08 AM



Title: Do not used this trading exchange
Post by: Yaunfitda on April 14, 2020, 08:02:08 AM
Good day to everyone, I just want to give newbies a heads-up regarding this new trading exchange.

Code:
 h t t p s://www[dot]neblidex[dot]xyz/ 

It is being promoted as a new kind of DEX. However, before you can used this platform, if you ask you you to download their application.

https://i.imgur.com/c7eX6VX.png

And that's where the issue will arise, you see their applications is very suspicious,

Code:
neblidex_win_v10.zip

contains a malicious code. I ran on a online sandbox and I get this results.

https://i.imgur.com/cxiFCuh.png

https://www.hybrid-analysis.com/sample/bf2a952ea01bed54d2b800eaed31050ca557208c9f8bacdd4ae58b41126fa231

So I'm just giving the community a heads-up, I almost fall for this trick. I immediately deleted the files from my device already.

Edit:

https://i.imgur.com/bLF3dFC.png

https://www.virustotal.com/gui/ip-address/162.210.96.119/relations


Title: Re: Do not used this trading exchange
Post by: Bttzed03 on April 14, 2020, 08:16:55 AM
I opened the website on Brave and it's already flagged.

Code:
chrome-extension://odbfpeeihdkbihmopkbjmoonfanlbfcl/phishing.html#hostname=www.neblidex.xyz&href=https%3A%2F%2Fwww.neblidex.xyz%2F

https://i.postimg.cc/C1fVYXFZ/Untitled.png