[List] Phishing Cryptocurrency Site

[Chikito]

Updated 16 December 2021

New Phishing

Phishing Trust Wallet


Old Post

Old Post

- Fake Optimism.io website
- Chipmixer.com.mx Phishing
- Shiba INU Phishing Site
- Fake Facebook Ethereum Giveaway
- Chipminxer Phishing
- Phishing axie infinity website
- Metamask Site Phishing
- Phishing chipmixẹr.com
- Phishing exodus.ac wallet
- Phishing pancakeswap.cheap
- Phishing Chipmixer on Review Website
- Fake Give Away 1inch.gift
- Phishing Walletconnection.org
- Phishing uniswap-meta Wallet
- Wilder World Fake Public Sale
- Fake Chipmixer.co.uk (chipmixkd2wgbqoy.onion)
- Phishing Exodus Wallet
- Phishing Myetherwallet
- FAKE Trezor Wallet
- Fake Electrum Wallet
- Scam walletinterlink.com
- Web Phishing Trezor
- Fake Myetherwallet and Uniswap
- Scam/Phishing validatewebwallets.online
- Phishing BestChange (bestchainge.club)
- Fake Exodus wallet
- Fake walletconnect.org
- Fake Uniswap (uinswop)
- Phishing Paxful Exchange
- Fake Elon Musk giveaway
- Fake Mycelium wallet on Android
- Phishing Uniswap
- Fake Binance Airdrop
- Phishing [coingecko.pro exchange]
- [uni-airdrop.org and bit2x.uno]
- [https://elonmuskxpro.com/]
- [https://money-tesla.com/]
- [https://uniswap.eth.link/]
- [Fake musk-coins.com]
- [Chipmixer Onion Link]
- [uni-drop.com]
- [uniswcp.org and justswapv2.com]
- [binancezh.com and uniswapz.org]
- Unireward and Unii.finance
- coin-ex.ru and besetchange.ru
- Uniswap.ug and https://socialbtc.org/
- https://uniswapv.com/
- https://ripplelab.in
- https://bledner.io/
- http://drop-eth.org/
- https://binancefound.com/
- exiodus.com
- https://bin-crypto.com/
- https://supportbnb.com/
- https://vitalikbb.top/
- https://autopoolcrypto.com/
- https://spacex-btc.biz/
- https://myetherwallet.com-to-the-access.com/index.php?
- https://tslahelp.me/
- https://2ethereum.org/
- http://Giveaway.is
- https://muskx.co/
- https://elonpromo.org/
- https://guadra.com
- https://clowallet.network/
- http://paxfuloffers.com/
- https://myfusionwallet.net/
- http://jaxxx.io/
- www.chambtc.us
- http://ethventure.com/
- http://bitcoin-barcode-generator.com/
- https://bitcoinelon.com/
- blendér.io
- https://donaldcrypto.com/
- https://www.free-ether.com/
- smatmixer.io
- https://lrezor.io/
- https://eth-giveout.com/
- www.treezor.io
- http://muetherewallet.com/
- https://exmo.me/
- locabicoins.net
- btnance.org
- monnero.org


Beginners and newbie should be careful about the phishing website. A lot of Scammers out there used a fake website to steal your Bitcoin and Cryptocurrency.

Read 5 Ways to Identify a Phishing Website and Read [GUIDE] Use this for identifying Scam/Phishing Websites & Exchanges in Crypto

On this thread, I want to share what we found out there.

For Example

1. Phishing exodus website: //exodlus.io



When scanning virus total has warned:
https://www.virustotal.com/gui/url/8bb6a4ef386b9c29d2cc00509aa3a44ec7d7dbf792f057074ad0ec471d8611e9/detection
BitDefender-Phishing

Flagged Ip address 185.212.130.65

Related IP

2. Fake electrum site : electum.org

[1715149331]

1715149331

[1715149331]

1715149331

[1715149331]

1715149331

[yazher]

Be careful to beginner and newbie checking twice before doing something

The site looks legit when you first see it, Thankfully we have this thing called "virus total" who can scan sites that used for phishing.
We to be careful about logging in on some wallets website Address. these are prone to this kind of attack. I saw someone who is nearly scam by this method. He got an offer from some unknown user, and they gave them a look-alike of their exchange site. then he was asked for his log-in exchange ID. Thankfully he was quick to manage to figure out that the site was not real and it was indeed a phishing site. Just like this one.

[Chikito]

I see that IP address related to localbitcoinis.net

Code:

2019-10-30-exodlus.io
2019-10-27-localbitcoinis.net
2019-10-27-liocalbitcoins.net
2019-10-27-llocalbitcoins.net
2019-10-27-localbitcolins.net
2019-10-27-loca1bitcoins.net
2019-10-27-iocalbitcoins.net
2019-10-27-localibitcoins.ru.com
2019-10-27-localbitcolns.org
2019-10-27-localbitcoln.ru
2019-10-27-ilocalbitcoins.net
2019-10-27-loca1bitcoins.com
2019-10-27-nicelhash.com
2019-10-27-mlnergate.com
2019-10-27-msl-afterburner.ru
2019-10-27-iocabitcoins.net
2019-10-27-iocalbitcolns.net
2019-10-27-localbiicoins.net
2019-10-27-litecoln.org
2019-10-26-locaibitcolns.com

Still same Flagged Ip address 185.212.130.65

This

guimlner.org
minergate.ru.com
monnero.org

Fake : guimlner.org



Fake : minergate.ru.com



Fake: monnero.org

[Krislaw]

https://www.electum.org/#download

Clicked Standalone Executable and windows installer
https://download.electrum.org/3.3.8/electrum-3.3.8.exe
https://download.electrum.org/3.3.8/electrum-3.3.8-setup.exe
is it direct to a true site?

[barnes13]

https://www.electum.org/#download

Clicked Standalone Executable and windows installer
https://download.electrum.org/3.3.8/electrum-3.3.8.exe
https://download.electrum.org/3.3.8/electrum-3.3.8-setup.exe
is it direct to a true site?

Well, this is what makes me wonder. If the fake website directs the download link to the electrum original site, what benefits can he get from this? Do you think that the crime he committed hasn't been perfect? I think that he can now use the original link and in the future the link can turn into a program that he has inserted a virus in?

[Lucius]

From Russia with love and desire for you coins

What anyone can do is report these pages on the following link : https://safebrowsing.google.com/safebrowsing/report_phish/?hl=en

With more reports sites will be blocked in most browsers (Chrome&Firefox), and also by some security software. It is the most effective way to protect all those who could become potential victims, and it takes just a few minutes of your time. I did my part, let's block them as soon as possible.

[Chikito]

I think that he can now use the original link and in the future, the link can turn into a program that he has inserted a virus in?

Maybe Next when a lot of people trust fake site Scammer prepares to inject a virus, Fake electrum looks clean from virus atm.
When looking at fake exodus site I found a lot of phishing
https://www.virustotal.com/gui/url/8bb6a4ef386b9c29d2cc00509aa3a44ec7d7dbf792f057074ad0ec471d8611e9/detection

[barnes13]

<…> If the fake website directs the download link to the electrum original site, what benefits can he get from this? Do you think that the crime he committed hasn't been perfect? I think that he can now use the original link and in the future the link can turn into a program that he has inserted a virus in?

The download links do not point to the original proper files (at least not now). Both download options (windows and Mac OS) point to the same file, which is already detected as a phishing file:
https://www.virustotal.com/gui/url/96eb2fe1512ef9c7b08b13b6b4f7e1f01671f122c572188978775379741165ce/detection

If the fake website from Exodus I can clearly see they put phishing on the program, but have you seen the fake website from Electrum? The link to download the file provided is exactly the same as the one on the original Electrum website: https://www.virustotal.com/gui/url/ba31287b8adf984730d6ff37f414e165d61dac7f3cb226b967d48262931fab48/detection

[JeromeTash]

If the fake website from Exodus I can clearly see they put phishing on the program, but have you seen the fake website from Electrum? The link to download the file provided is exactly the same as the one on the original Electrum website: https://www.virustotal.com/gui/url/ba31287b8adf984730d6ff37f414e165d61dac7f3cb226b967d48262931fab48/detection

There is a also a possibility that they are still updating their website. If you look at the domain information, the domain is newly registered. Perhaps they are still planning to include their malicious files soon.

It's good that OP discovered the  phishing sites very early.

[DdmrDdmr]

<...>

Yes, you're right. I just did a side by side comparison on all the links and they all seem to be original so far. It’s likely that they created the page ahead of the development as @JeromeTash suggests, and were discovered sooner that they expected.

[barnes13]

Maybe I want to give some advice to you if you find a site like that, we can report it via Google or Yahoo.

The steps to report it through Google are very easy:
Step 1: Go to page: https://safebrowsing.google.com/safebrowsing/report_badware/

Step 2: Write the URL that is suspected as fake or scam website

Step 3: You can write additional details about the website and explain it in the space provided

Step 4: Click "submit report" and Google will investigate it.

Steps to report via Yahoo you can see it by visiting this link: https://safety.yahoo.com/MY/Security/REPORTING-SECURITY-ISSUES-MY.html

[Lafu]

Looks like there is now again some wave of phishing sites like it was last year at some point .

Always read the Name in the adress field and check it a few times before you enter or connect to the webpage , Wallet or anything !
Also check a few times what you downloading or doing when you have to insert your password and Login details .

I cant say it often enough !  Check everything 2 times or more when you Login in something   specialy when money or crypto is involved !

Its your money and Coins

[Chikito]

https://safebrowsing.google.com/safebrowsing/report_badware/
https://safety.yahoo.com/MY/Security/REPORTING-SECURITY-ISSUES-MY.html

When we look at the history Scammer always changes the domain.
Scammer always changes it into another fake website.
I am ready to report that IP address here https://www.abuseipdb.com/
Still, don't know what the best place to report IP address like your both link

[notblox1]

Thanks for warning us!

Looks like this is some kind of bad Russian only version of exodus phishing.
I reported it also...so let's hope they will take it down soon.

[erickastella]

thank you very much my brother with this I can avoid phishing very much, I am very helped by this post, thank you very much for sharing the information my friend
I also have a suggestion that there is an antivirus called ESET antivirus which is very powerful because it can detect phishing and other websites.

[Chikito]

Found Fake MyEtherwallet:  myetherewallet.info

Code:

Domain Name: WWW-MYETHEREWALLET.INFO
Registry Domain ID: D503300001182102047-LRMS
Registrar WHOIS Server: whois.reg.com
Registrar URL: http://www.reg.com
Updated Date: 2019-10-27T13:00:27Z
Creation Date: 2019-10-26T20:28:05Z
Registry Expiry Date: 2020-10-26T20:28:05Z
Registrar Registration Expiration Date:
Registrar: Limited Liability Company "Registrar of domain names REG.RU"
Registrar IANA ID: 1606
Registrar Abuse Contact Email: abuse@reg.ru
Registrar Abuse Contact Phone: +7.4955801111

https://www.virustotal.com/gui/url/c214a72e293e3f54dd2af812cf1f53c19656a4a61c9cc4436963204483ee2d89/detection



Related with: https://www.virustotal.com/gui/ip-address/194.58.112.174/relations

Code:

myelherewallut.com
myeihereswallet.com
muetherewallet.com
myeiherwollet.com
myelherewallets.com

[SabrinaCane]

OHMYDAYS thanks for the warning! I have just had a call from this number that offered to sell me bitcoin and told me to go to this webpage!! I told him I had to check it over first and give him a call back and stumbled across this  https://scam-numbers.co.uk/Number/0031858888229/ and also this post so thanks guys! Seems to be a scam for sure! If anyone can point me in the direction of a legitimate seller that would be grand! Thanks, Sabrina x

[panganib999]

I think that he can now use the original link and in the future, the link can turn into a program that he has inserted a virus in?

Maybe Next when a lot of people trust fake site Scammer prepares to inject a virus, Fake electrum looks clean from virus atm.
When looking at fake exodus site I found a lot of phishing
https://www.virustotal.com/gui/url/8bb6a4ef386b9c29d2cc00509aa3a44ec7d7dbf792f057074ad0ec471d8611e9/detection

This thing could really fool lots of people. The site looks so fine and legitimate that you won't think any bad about it, not even a doubt. People should really take caution and be extra careful of what websites they are going to website. Since there are websites who are copying the graphic user interface of original websites, they coukd put a bookmark to their most visited  sites so that they won't be redirected and use fake ones which might be packaged with other malicious softwares.

[Bightening]

OHMYDAYS thanks for the warning! I have just had a call from this number that offered to sell me bitcoin and told me to go to this webpage!! I told him I had to check it over first and give him a call back and stumbled across this  https://scam-numbers.co.uk/Number/0031858888229/ and also this post so thanks guys! Seems to be a scam for sure! If anyone can point me in the direction of a legitimate seller that would be grand! Thanks, Sabrina x

There’re a good number of exchanges that would sell you bitcoins. I don’t know your country/region, or your payment option, so can’t help.

Phishing tricks keep getting better. Every internet user should keep that information in mind every time you use the internet, most especially when it comes to finances and privacy.
I’m working on a thread that explains more details on phishing tricks forum users like btt are liable to, and should be aware of.

[Casdinyard]

OHMYDAYS thanks for the warning! I have just had a call from this number that offered to sell me bitcoin and told me to go to this webpage!! I told him I had to check it over first and give him a call back and stumbled across this  https://scam-numbers.co.uk/Number/0031858888229/ and also this post so thanks guys! Seems to be a scam for sure! If anyone can point me in the direction of a legitimate seller that would be grand! Thanks, Sabrina x

If you prefer to buy on your local, head on here.
https://localbitcoins.com/

But you can buy more conveniently on exchange sites sich as binance and bittrex and other reputed sites.
You can create your account here.
https://www.binance.com/m-register.html
https://global.bittrex.com/account/register

Good thing you didn't easily believe on those cold callers. Next time be careful where you sign up such as giving your personal information since cold callers use this to keep bothering you.

[Chikito]

Be careful of this :

fake MyEtherWallet: https[:]//myetherwallet-extra-bonuses.000webhostapp.com/access-my-wallet/

reported.

Code:

Domain Name: 000WEBHOSTAPP.COM
       Registry Domain ID: 2027404438_DOMAIN_COM-VRSN
       Registrar WHOIS Server: whois.hostinger.com
       Registrar URL: http://www.hostinger.com
       Updated Date: 2017-04-05T08:04:14Z
       Creation Date: 2016-05-11T13:34:12Z
       Registry Expiry Date: 2022-05-11T13:34:12Z
       Registrar: Hostinger, UAB
       Registrar IANA ID: 1636
       Registrar Abuse Contact Email: abuse@hostinger.com
       Registrar Abuse Contact Phone: +37064503378
       Domain Status: clientTransferProhibited https://icann.org/epp#clientTransferProhibited
       Name Server: DNS1.000WEBHOST.COM
       Name Server: DNS2.000WEBHOST.COM
       DNSSEC: unsigned
       URL of the ICANN Whois Inaccuracy Complaint Form: https://www.icann.org/wicf/
    >>> Last update of whois database: 2019-10-30T12:23:33Z <<<

[Wysi]

Be careful of this :

fake MyEtherWallet: https[:]//myetherwallet-extra-bonuses.000webhostapp.com/access-my-wallet/

reported.

Code:

Domain Name: 000WEBHOSTAPP.COM
       Registry Domain ID: 2027404438_DOMAIN_COM-VRSN
       Registrar WHOIS Server: whois.hostinger.com
       Registrar URL: http://www.hostinger.com
       Updated Date: 2017-04-05T08:04:14Z
       Creation Date: 2016-05-11T13:34:12Z
       Registry Expiry Date: 2022-05-11T13:34:12Z
       Registrar: Hostinger, UAB
       Registrar IANA ID: 1636
       Registrar Abuse Contact Email: abuse@hostinger.com
       Registrar Abuse Contact Phone: +37064503378
       Domain Status: clientTransferProhibited https://icann.org/epp#clientTransferProhibited
       Name Server: DNS1.000WEBHOST.COM
       Name Server: DNS2.000WEBHOST.COM
       DNSSEC: unsigned
       URL of the ICANN Whois Inaccuracy Complaint Form: https://www.icann.org/wicf/
    >>> Last update of whois database: 2019-10-30T12:23:33Z <<<

These hackers an go to any extend in order to cheat people. Thank you so much for bringing this to our notice as this will help most of the newbies and those users who are rarely uses MEW. MEW is doing it's part by asking us to double check the URL link before we enter any details. We need to be more cautious as these hackers might come up with same tactics for other exchanges as well.

[Chikito]

Found another LocalBitcoins Phising site

Fake: localbcoin.com



Scanned by Virustotal
https://www.virustotal.com/gui/url/98ec2e650058b3d527d441a7d8d614ea77d32335b83aebeac78f98c0cbe7c007/detection

Code:

Domain Name: LOCALBCOIN.COM
Registry Domain ID: 2448745451_DOMAIN_COM-VRSN
Registrar WHOIS Server: whois.namecheap.com
Registrar URL: http://www.namecheap.com
Updated Date: 2019-10-28T04:15:26Z
Creation Date: 2019-10-28T04:05:28Z
Registry Expiry Date: 2020-10-28T04:05:28Z
Registrar: NameCheap, Inc.
Registrar IANA ID: 1068
Registrar Abuse Contact Email: abuse@namecheap.com
Registrar Abuse Contact Phone: +1.6613102107
Domain Status: clientTransferProhibited https://icann.org/epp#clientTransferProhibited
Name Server: DNS1.NAMECHEAPHOSTING.COM
Name Server: DNS2.NAMECHEAPHOSTING.COM

Be Aware newbie should double-check before sign in

[Lucius]

I check all links posted by OP, and only last for fake LB is blocked by Chrome as a dangerous site, all other sites are still fully accessible and pose a threat to uninformed users. More reports will help to change the situation and to do that just report all links to: https://safebrowsing.google.com/safebrowsing/report_phish/?hl=en

[Chikito]

I check all links posted by OP, and only last for fake LB is blocked by Chrome as a dangerous site, all other sites are still fully accessible and pose a threat to uninformed users. More reports will help to change the situation and to do that just report all links to: https://safebrowsing.google.com/safebrowsing/report_phish/?hl=en

I did the report. Maybe google support team have a weekend.

And today found fake binance dex: btnance.org



https://www.virustotal.com/gui/url/2d98a050dc1ce3d617da8d4a59f253147f51b3d7dd837e06506b7f449da732b4/detection

[masulum]

@OP to avoid any accident unwanted clicking any suspicious website, maybe you can edit link and make it un-clickable, or better to use code tag. Sometimes when visiting this forum using mobile phone, it's very possible to make unwanted clicking content.

Thank you, and good job to make any phishing website related to crypto in one place.

[Casdinyard]

@OP to avoid any accident unwanted clicking any suspicious website, maybe you can edit link and make it un-clickable, or better to use code tag.

Or don't put the link anymore and besides there's already an image of the fake site. Just to be more safe, I mean some are not really mindful.

Btw, already reported the sites. Thanks for the heads up. Keep it up.

[panganib999]

Phishing exodus wallet site: https://exodlus.io
original here: https://exodus.io/

Look screenshot here ;

Woah. It seems legit that it won't give you any doubts and red flags about joining and using it.  These criminals are really getting smarter and smarter as they try to develop and make more phishing and scamming sites. This is why  beginners, it is essential if you take vigilance seriously and take it with you all through out your journey here in crypto space. This thread would be very helpful to raise awareness for beginners. Also always avoid impulsively clicking links from unknown sources you could avoid click baits.

[Chikito]

Phishing exodus wallet site:

Code:

//exodlus.io

Found another fake exodus :

Code:

//exodlus.com

https://www.virustotal.com/gui/url/0b7e767c5b2ee3a3a69e4c84711609fef7d842fc2da926a3e63e4081f9ff02d3/detection

Scanned and nothing virus on site

What the different?

Let's check domain information

Fake - Domain EXODLUS.COM info

Code:

Domain name: EXODLUS.COM
Registry Domain ID: 2450282733_DOMAIN_COM-VRSN
Registrar WHOIS Server: whois.reg.com
Registrar URL: https://www.reg.com
Registrar URL: https://www.reg.ru
Updated Date: 2019-11-01T01:06:17Z
Creation Date: 2019-11-01T01:06:16Z
Registrar Registration Expiration Date: 2020-11-01T01:06:16Z
Registrar: Registrar of domain names REG.RU LLC
Registrar IANA ID: 1606
Registrar Abuse Contact Email: abuse@reg.ru
Registrar Abuse Contact Phone: +7.4955801111
Status: clientTransferProhibited http://www.icann.org/epp#clientTransferProhibited
Registrant ID:
Registrant Name: Protection of Private Person
Registrant Street: PO box 87, REG.RU Protection Service
Registrant City: Moscow
Registrant State/Province:
Registrant Postal Code: 123007
Registrant Country: RU
Registrant Phone: +7.4955801111
Registrant Phone Ext:
Registrant Fax: +7.4955801111
Registrant Fax Ext:
Registrant Email: EXODLUS.COM@regprivate.ru
Admin ID:
Admin Name: Protection of Private Person
Admin Street: PO box 87, REG.RU Protection Service
Admin City: Moscow
Admin State/Province:
Admin Postal Code: 123007
Admin Country: RU
Admin Phone: +7.4955801111
Admin Phone Ext:
Admin Fax: +7.4955801111
Admin Fax Ext:
Admin Email: EXODLUS.COM@regprivate.ru
Tech ID:
Tech Name: Protection of Private Person
Tech Street: PO box 87, REG.RU Protection Service
Tech City: Moscow
Tech State/Province:
Tech Postal Code: 123007
Tech Country: RU
Tech Phone: +7.4955801111
Tech Phone Ext:
Tech Fax: +7.4955801111
Tech Fax Ext:
Tech Email: EXODLUS.COM@regprivate.ru
Name Server: ns1.reg.ru
Name Server: ns2.reg.ru
DNSSEC: Unsigned
URL of the ICANN WHOIS Data Problem Reporting System: http://wdprs.internic.net/
>>> Last update of WHOIS database: 2019.11.03T15:05:23Z <<<

Fake - Domain EXODLUS.IO info

Code:

Domain Name: EXODLUS.IO
Registry Domain ID: D503300001182128865-LRMS
Registrar WHOIS Server:
Registrar URL: http://www.epag.de
Updated Date:
Creation Date: 2019-10-29T20:14:17Z
Registry Expiry Date: 2020-10-29T20:14:17Z
Registrar Registration Expiration Date:
Registrar: EPAG Domainservices GmbH
Registrar IANA ID: 85
Registrar Abuse Contact Email:
Registrar Abuse Contact Phone:
Reseller:
Domain Status: serverTransferProhibited https://icann.org/epp#serverTransferProhibited
Domain Status: addPeriod https://icann.org/epp#addPeriod
Registrant Organization:
Registrant State/Province:
Registrant Country: CA
Name Server: NS1.REG.RU
Name Server: NS2.REG.RU
DNSSEC: unsigned

Real Exodus.io Info

Code:

Domain Name: EXODUS.IO
Registry Domain ID: D503300000040368494-LRMS
Registrar WHOIS Server:
Registrar URL:
Updated Date: 2019-09-30T21:21:05Z
Creation Date: 2015-04-06T04:48:53Z
Registry Expiry Date: 2024-04-06T04:48:53Z
Registrar Registration Expiration Date:
Registrar: CloudFlare, Inc.
Registrar IANA ID: 1910
Registrar Abuse Contact Email:
Registrar Abuse Contact Phone:
Reseller:
Domain Status: clientDeleteProhibited https://icann.org/epp#clientDeleteProhibited
Domain Status: clientTransferProhibited https://icann.org/epp#clientTransferProhibited
Domain Status: clientUpdateProhibited https://icann.org/epp#clientUpdateProhibited
Domain Status: serverTransferProhibited https://icann.org/epp#serverTransferProhibited
Registrant Organization: WhoisGuard, Inc.
Registrant State/Province: Panama
Registrant Country: PA
Name Server: JESSICA.NS.CLOUDFLARE.COM
Name Server: FRANK.NS.CLOUDFLARE.COM
DNSSEC: unsigned

The newbie must be careful about giveaway like this site:

Code:

//freebtceth.com
//btcandeth.com
//bakkt-gift.info

Those aren't given away BTC and ETH, you will get the virus and scammed.

https://www.virustotal.com/gui/url/ad081ab0ad668b09021d22fbc91ce363c57b924bb1f25ea9ceacd59c83762030/detection
https://www.virustotal.com/gui/url/eb5e8d1cd0d0e6b364a80f08a9cae10b4bfe012de46425b7e740bff2cc75fb9d/detection
https://www.virustotal.com/gui/url/eed4f52ce1ad8da6f40e6f2cd34f49bc0e3728403112c38645da87682dbe2ae2/detection

[Chikito]

>>> Help me to report IP address: 185.212.130.65 because always make the phishing site

https://www.virustotal.com/gui/ip-address/185.212.130.65/relations

Code:

2019-11-06-exodlus.io
2019-11-06-iocabitcoins.net
2019-11-06-iliocalbitcoins.net
2019-11-05-locabicoins.net
2019-11-05-localbiicoins.net
2019-11-05-litecoln.org
2019-11-05-localibitcoins.ru.com
2019-11-05-localbitcolins.net
2019-11-04-atomicwalet.com
2019-11-04-www.exodlus.com
2019-11-04-exodlus.com
2019-11-04-llocalbitcoins.net
2019-11-04-liocalbitcoins.net
2019-11-04-localbitcoinis.net
2019-11-04-loca1bitcoins.net
2019-11-04-ilocalbitcoins.net
2019-11-04-locaibitcolns.com
2019-11-04-iocalbitcoins.net
2019-11-04-loca1bitcoins.com
2019-11-04-iocalblitcoins.net
2019-11-04-iocalbicoins.net
2019-11-04-www.monnero.org
2019-11-04-www.electum.org
2019-10-27-localbitcolns.org
2019-10-27-localbitcoln.ru
2019-10-27-nicelhash.com

Scammer every day makes phishing like atomicwalet.com, locaibitcolns.com, litecoln.org, exodlus.io, etc.

I did report and need more people here to report those IP.

Thanks.
 

[~Money~]

>>> Help me to report IP address: 185.212.130.65 because always make the phishing site

https://www.virustotal.com/gui/ip-address/185.212.130.65/relations

....

Scammer every day makes phishing like atomicwalet.com, locaibitcolns.com, litecoln.org, exodlus.io, etc.

I did report and need more people here to report those IP.

Thanks.
 

Netherlands DCs won't care much about content on their servers, they are famous in this field since the beginning,
I had build a case against someone using their servers to make DDoS attacks in very big scales but they didn't even replied emails and court simply closed the case 

reporting those IPs might help other services take action in sending warning messages to their users, but if you are trying to report them to bring those IPs or servers down, you won't face any success easily

[Chikito]

Found this
Original site : https://bittab.io/
Fake  webite : //bittab.org/

Code:

Domain Name: BITTAB.IO
Registry Domain ID: D503300000064550605-LRMS
Registrar WHOIS Server: whois.namecheap.com
Registrar URL: www.namecheap.com
Updated Date: 2019-01-11T12:36:34Z
Creation Date: 2018-02-10T16:02:51Z
Registry Expiry Date: 2020-02-10T16:02:51Z
Registrar Registration Expiration Date:
Registrar: NameCheap, Inc
Registrar IANA ID: 1068

Code:

Domain Name: BITTAB.ORG
Registry Domain ID: D402200000011818438-LROR
Registrar WHOIS Server: whois.reg.com
Registrar URL: http://www.reg.com
Updated Date: 2019-11-05T15:07:04Z
Creation Date: 2019-11-05T15:07:01Z
Registry Expiry Date: 2020-11-05T15:07:01Z
Registrar Registration Expiration Date:
Registrar: Registrar of Domain Names REG.RU LLC
Registrar IANA ID: 1606

Be careful No different with original website

[Chikito]

Real Website: https://exmo.com/

Phishing website

Code:

https://exmo.me/

Real Website: https://exmo.com/

Code:

Domain Name: EXMO.COM
Registry Domain ID: 92842160_DOMAIN_COM-VRSN
Registrar WHOIS Server: whois.internet.bs
Registrar URL: http://www.internet.bs
Updated Date: 2017-11-14T10:53:38Z
Creation Date: 2002-12-05T06:16:28Z
Registry Expiry Date: 2021-12-05T06:16:28Z
Registrar: Internet Domain Service BS Corp
Registrar IANA ID: 2487

Phishing website

Code:

Domain Name: EXMO.ME
Registry Domain ID: D108500000015705565-AGRS
Registrar WHOIS Server:
Registrar URL: www.tldregistrarsolutions.com
Updated Date: 2017-09-18T14:32:13Z
Creation Date: 2015-04-05T10:07:04Z
Registry Expiry Date: 2020-04-05T10:07:04Z
Registrar Registration Expiration Date:
Registrar: TLD Registrar Solutions Ltd.
Registrar IANA ID: 1564

https://www.virustotal.com/gui/url/a7c9f98d3cf4a248bdaf05a6d0461f5ef85bdd2d33d89a47f134c602a13d105b/detection



Be Careful Noobs

[Chikito]

Let's see how Scammer manipulated MyEtherWallet

Code:

http://muetherewallet.com/
http://myeiherwollet.com/
http://myentervallet.com/
http://myelhereswallet.com/
http://myeitnerwaliet.com/
http://myethereswallets.com/
http://myehtervallet.com/
http://myelherewallets.com/
http://rnyethereswallet.com/
http://myelherewallut.com/

https://www.virustotal.com/gui/url/37c0a2a5637bb8281cc9380521a05a71e8df0fc8145369a90abd4fb76a1605af/detection
https://www.virustotal.com/gui/url/a33df647cffe55ad19f68768b5b7b405dc1b1dd0c49304e2d341ff364970e3e2/detection
https://www.virustotal.com/gui/url/af3748494186d8324bbb2e27efddc7d6f88f31b3bc5a464f8592b2e594721745/detection
https://www.virustotal.com/gui/url/3f29d61018c75517c59473a1d2542b699ee68a19f612c28a965032b5566eba03/detection
https://www.virustotal.com/gui/url/3fe9099a684ef833a09fc72dfe23ba2ce7ae7770f58c97301a373816497418b9/detection
https://www.virustotal.com/gui/url/637b8188d639b613d3c553413e7f62ed8cec8e689d4cfefcd7527007292eb93b/detection
https://www.virustotal.com/gui/url/3fd3fc809e360bec502f6fbfe08d6a1e837357cffd2d5f0706a167df966c8d53/detection
https://www.virustotal.com/gui/url/64bef2b379158dd717f86ce9f2bff6ba473c16dada47819290a076b9931407d2/detection
https://www.virustotal.com/gui/url/dd1b7ce1a738d1b96859bdcf6c5dd692db5387c0c43ccabcf705050307e009d7/detection
https://www.virustotal.com/gui/url/191abfdf5f38b48af58b30f0d7547d7205f8c896b0881d661fdf90a4ce919518/detection

One of them still make the offering



Newbie and beginner must far away from those sites, they will be stolen your money

[Chikito]

This IP 149.129.176.152 have Multi Phising site cryptocurrency : Trezor, ledger, etc

https://www.virustotal.com/gui/ip-address/149.129.176.152/relations

Code:

www.treezor.io
www.trezor.promo
leedger.info
www.tlezor.io
www.trrezor.io
www.exodus.ws
www.exodus.bet

Example :

Code:

treezor.io

https://www.virustotal.com/gui/url/8739ebbfb4442de492fa5b0328f179a81dde142609eef9e8ecd1028f4b3116d0/detection

BitDefender
Phishing
ESET
Phishing
Fortinet
Phishing
G-Data
Phishing
Sophos AV
Malicious

I thing the scammer Will continue to make phishing site using that IP, be carefull nobsss..

[Chikito]

Phishing Blockchain.com

Code:

https://login-blockchajn.com

Domain Information:

Code:

IP Address: 103.16.228.163
Geolocation: HK (Hong Kong)
Domain Name: LOGIN-BLOCKCHAJN.COM
Registry Domain ID: 2443618596_DOMAIN_COM-VRSN
Registrar WHOIS Server: whois.registrar.eu
Registrar URL: http://www.openprovider.com
Updated Date: 2019-10-14T18:32:52Z
Creation Date: 2019-10-14T18:32:46Z
Registry Expiry Date: 2020-10-14T18:32:46Z
Registrar: Hosting Concepts B.V. d/b/a Openprovider
Registrar IANA ID: 1647

https://www.virustotal.com/gui/url/06326ba8493ba4efae4856518c627a5128642773dde28b14ede3b3f78603a17c/detection

BitDefender-Phishing
CLEAN MX-Phishing

Be Careful

[Chikito]

Fake Give away Bitcoin and Ethereum

Code:

http://elonmuskgo.com/

Be aware scammer use fake medium Elon musk to give away Bitcoin and ethereum



The link will direct you to send BTC and ETH to get 10X, this is fake and potential scam.





https://www.virustotal.com/gui/url/4539c3892433c86efa77b48f6ad88f48c696ee970983aa14ad6439328d7a09ba/detection

Code:

IP Address: 195.24.68.21
Domain Name: ELONMUSKGO.COM
Registry Domain ID: 2467017887_DOMAIN_COM-VRSN
Registrar WHOIS Server: whois.nic.ru
Registrar URL: http://nic.ru
Updated Date: 2019-12-14T11:35:06Z
Creation Date: 2019-12-14T11:35:04Z
Registry Expiry Date: 2020-12-14T11:35:04Z
Registrar: Regional Network Information Center, JSC dba RU-CENTER

Let's see related IP
https://www.virustotal.com/gui/ip-address/195.24.68.21/relations



Be careful Elon musk never give away cryptocurrency

[Chikito]

Warning BTC and eth give away, sending your fund first for receipt 100x BTC and eth.

Code:

http://btcandeth.com/
http://btcethgift.com/

Domain information

Code:

IP Address: 185.174.174.220
Geolocation: UA (Ukraine)
Domain Name: BTCETHGIFT.COM
Registry Domain ID: 2429780829_DOMAIN_COM-VRSN
Registrar WHOIS Server: whois.namesilo.com
Registrar URL: http://www.namesilo.com
Updated Date: 2019-09-04T00:45:50Z
Creation Date: 2019-09-04T00:45:50Z
Registry Expiry Date: 2020-09-04T00:45:50Z

It's really fake, don't send your Bitcoin. They will be scamming you.

[TravelMug]

I found this fake ETH giveaway:

Code:

https://eth-giveout.com/

Scammers ETH:

Code:

0xB5c06ce49d0C63211E5d335Cf42ecdA5C3f30D8a

Code:

IP Address: 	162.241.217.210 - 1,641 other sites hosted on this server
IP Location: 	United States - Utah - Provo - Unified Layer
ASN:   	        United States AS46606 UNIFIEDLAYER-AS-1 - Unified Layer, US (registered Oct 24, 2008)
Domain Status: 	Registered And Active Website
IP History: 	2 changes on 2 unique IP addresses over 0 years 

https://www.virustotal.com/gui/ip-address/162.241.217.210/relations

[Jiyens3]

Beginners and newbie on the cryptocurrency world should be careful about the phishing website. A lot of Scammers out there used a fake website to steal your Bitcoin.

Read 5 Ways to Identify a Phishing Website and Read [GUIDE] Use this for identifying Scam/Phishing Websites & Exchanges in Crypto

On this thread, I want to share what I found out there.

1. Phishing exodus website: //exodlus.io
original: https://exodus.io/

Look screenshot here ;

Code:

Network
185.212.130.0/24 (AS200313 INTERNET-IT, NL)
Whois
Domain Name: EXODLUS.IO
Registry Domain ID: D503300001182128865-LRMS
Registrar WHOIS Server:
Registrar URL: http://www.epag.de
Updated Date:
Creation Date: 2019-10-29T20:14:17Z
Registry Expiry Date: 2020-10-29T20:14:17Z

When scanning virus total has warned:
https://www.virustotal.com/gui/url/8bb6a4ef386b9c29d2cc00509aa3a44ec7d7dbf792f057074ad0ec471d8611e9/detection
BitDefender-Phishing

Flagged Ip address 185.212.130.65

Related IP

Look This fake  site using same IP address :

electum.org
litecoln.org
bitcolncore.org
guimlner.org
minergate.ru.com
nvldia.ru
monnero.org

2. Fake electrum site : electum.org



3. Fake litecoin site : litecoln.org



4. Fake Bitcoincore site: bitcolncore.org


5. Phising Localbitcoins

6. Phishing Blockchain.info

I will update this thread when I found another phishing.

so usefull thread, phising web very harmful. such you said above many phising website and on of them is myetherwallet
honestly, i have experienced phising in myetherwallet. i am forgot how i can go to for phising web then suddenly i lose all my token in myetherwallet
so sad about that. so from that case i always to bookmark all important address

[Chikito]

Find more Phishing like this

be carefull do not click this link

Code:

http://newcryptogift.com/
http://finalgiveaway.com

Don't deposit anything. this is 100% scam, will steal your money.

and same like this

Code:

https://elongive.net
http://musk.blog
http://musk.group/

Elon musk never gives away cryptocurrency.

When you find like those phishing, please report into: https://safebrowsing.google.com/safebrowsing/report_phish/?hl=en

[Baofeng]

Criminals are not resting, and so are we:

Code:

 https://muskgiveaway.com/ 

Code:

 https://elongive.live/ 

Kindly help me report this sites, thanks again.

[Baofeng]

Very clever, 

Code:

 FAKE PHISHING SITE: https://lrezor.io/ 

If you mistype or didn't see the mis spelling, I'm sure you will fall for the trap.



Archive: http://web.archive.org/save/https://lrezor.io/

[Chikito]

Code:

 FAKE PHISHING SITE: https://lrezor.io/ 

Thanks for added.
look like this domain has connected malicius keylogger too.
https://www.virustotal.com/gui/ip-address/104.31.68.49/relations



We should be careful that's Ip address and domain to not download file from untrusted source.


Also, Official trezor has an announcement about "the fake Trezor Wallet beta-testing application form circulating in Telegram being spread by accounts pretending to be Trezor team members."
https://twitter.com/Trezor/status/1218179757847797760

[Chikito]

Warning phishing mixing service

Fake:

Code:

smatmixer.io

Code:

https://smatmixer.io/en/start-mixing.html

Picture



Domain Information:

Code:

IP Address: 104.27.149.87
Domain Name: SMATMIXER.IO
Registry Domain ID: D503300001182847933-LRMS
Registrar WHOIS Server: whois.namecheap.com
Registrar URL: www.namecheap.com
Updated Date: 2020-01-16T14:38:51Z
Creation Date: 2020-01-15T02:06:07Z
Registry Expiry Date: 2021-01-15T02:06:07Z
Registrar Registration Expiration Date:
Registrar: NameCheap, Inc
Registrar IANA ID: 1068

We should careful, double-check your written before action.

Real Website: https://smartmixer.io

[Baofeng]

Eventhough Elon Musk has shown his true colors about bitcoin, cyber criminals are still using his name:

Code:

https://musk.bet/

Code:

https://teslagive.vip/

Edit: Another LBC Phished site:

Code:

https://localbitcoins.name/

Registrant    REDACTED FOR PRIVACY
Registrant Org    REDACTED FOR PRIVACY
Registrant Country    ru
Registrar    1API GmbH
IANA ID: 1387
URL: http://www.1api.net
Whois Server: whois.1api.net

(p)
Registrar Status    clientTransferProhibited
Dates    7 days old
Created on 2020-01-26
Expires on 2021-01-26
Updated on 2020-01-26
Name Servers    NS3.CNMSN.COM (has 7,009 domains)
NS4.CNMSN.COM (has 7,009 domains)
   
Reverse NS   
Tech Contact    REDACTED FOR PRIVACY
REDACTED FOR PRIVACY,
REDACTED FOR PRIVACY, REDACTED FOR PRIVACY, REDACTED FOR PRIVACY, REDACTED FOR PRIVACY
IP Address    185.178.208.178 - 20 other sites hosted on this server     

http://whois.domaintools.com/localbitcoins.name

[Baofeng]

Kindly add:

Code:

 https://earn2xethnow.com/ 

[Chikito]

Code:

 https://earn2xethnow.com/ 

Seems that's IP have flagged, all domain as fake ethereum giveaway

https://www.virustotal.com/gui/ip-address/81.16.29.111/relations

Code:

real2xeth.com
www.real2xeth.com
earn2xethnow.com
www.earn2xethnow.com
earn2xeth.com
www.earn2xeth.com
www.get2xeth.com
get2xeth.com
www.2xeth.com
2xeth.com
www.tokenieonow.com
tokenieonow.com
ethdoublerplus.com
my2xcrypto.com
www.freexrpnow.com
freexrpnow.com
instant2xeth.com
www.instant2xeth.com
eth2x.me
www.eth2x.me
ethdoublernow.com
www.2xeth.me
2xeth.me
www.ethdoublernow.com
ethdoublernow.me
www.ethdoublerplus.com
www.ethdoublernow.me
ethdoubler.me
www.ethdoubler.me
programaemnuvem.com

Domain and IP's Information

Code:

IP Address: 81.16.29.111
Domain Name: EARN2XETHNOW.COM
Registry Domain ID: 2484433653_DOMAIN_COM-VRSN
Registrar WHOIS Server: whois.hostinger.com
Registrar URL: http://www.hostinger.com
Updated Date: 2020-01-25T12:14:45Z
Creation Date: 2020-01-25T12:14:44Z
Registry Expiry Date: 2021-01-25T12:14:44Z

[masulum]

FAKE ETHEREUM GIVEAWAY

ETH Address: 0x69898205539f2556dfdfc202c711646638eb9626

Code:

https://www.free-ether.com/

https://www.virustotal.com/gui/ip-address/198.54.120.214/relations

Code:

Domain name: free-ether.com
Registry Domain ID: 2484823191_DOMAIN_COM-VRSN
Registrar WHOIS Server: whois.namecheap.com
Registrar URL: http://www.namecheap.com
Updated Date: 0001-01-01T00:00:00.00Z
Creation Date: 2020-01-26T16:28:05.00Z
Registrar Registration Expiration Date: 2021-01-26T16:28:05.00Z

Page screenshot:

FAKE ELON MUSK/TESLA CRYPTO GIVEAWAY

Code:

https://elonxgifts.com
https://muskbonus.info
https://muskpromo.com
elonxgive.com
https://muskfun.info/eth/
https://get-mytesla.com
https://muskgift.com
https://musksecret.com/eth
https://mdl3t.com
https://elonxprize.com/eth
https://cyberelon.com
https://teslaxdrop.com/eth
https://www.tesla.click

FAKE BINANCE GIVEAWAY

Code:

binancefutures-eth.com
binancebtcgiveawaybonanza.simplesite.com

[Baofeng]

I already posted it here. But I think it's worth to mentioned him in this board as well.

Code:

 https://craigsecret.com/ 

Archived: http://web.archive.org/save/https://craigsecret.com/

Code:

Domain Name: CRAIGSECRET.COM
Registry Domain ID: 2483231969_DOMAIN_COM-VRSN
Registrar WHOIS Server: whois.reg.com
Registrar URL: http://www.reg.ru
Updated Date: 2020-01-21T23:28:44Z
Creation Date: 2020-01-21T23:28:40Z
Registry Expiry Date: 2021-01-21T23:28:40Z
Registrar: REGISTRAR OF DOMAIN NAMES REG.RU LLC
Registrar IANA ID: 1606
Registrar Abuse Contact Email: abuse@reg.ru
Registrar Abuse Contact Phone: +74955801111
Domain Status: clientTransferProhibited https://icann.org/epp#clientTransferProhibited
Name Server: NS1.REG.RU
Name Server: NS2.REG.RU

https://www.whois.net/

[Baofeng]

I found another "crypto gold", 

Code:

 https://donaldcrypto.com/
https://donaldcrypto.com/btc/
https://donaldcrypto.com/eth/

BTC wallet:

Code:

1PEqxR9JmWMUFB4J1Qb6RzGLGSx4ru5emc

ETH wallet:

Code:

0x8f263aD0FfD2aEAaF33aEEB6e689f1D7E6bB4dcd

[Chikito]

Be Careful, someone has lost his money by sent to fake mixing service

I leave an alert here, there is a fake website called smantmixer.io
Unfortunately I ended up losing one of my transactions by sending my balance to this fake site.   

Fake:

Code:

smantmixer.io

Warning for us to double checking before do anything else.

Real Website: https://smartmixer.io

[Baofeng]

Code:

https://elonxspace.com/

BTC Wallet:

Code:

14aDScg4SeF4GDNLTpXezGPsfKkhoENweV

Code:

0xbe4F201CA79AD8961a35D0B96BE2fF42445a7d8a

[Baofeng]

Brad Garlinghouse (Ripple CEO) Fake Giveaway

Code:

https://xrp2020.net/

XRP Wallet:

Code:

rw65sa4wHeGVUxaEVWWc6CUKP92qP46vnr

[Chikito]

Code:

https://elonxspace.com/

Link has alot of virus detected https://www.virustotal.com/gui/url/326f63444b3aabd904e57234288ac9c6e78b479bf796e21a91ff2982a70da4cb/detection



IP relations
https://www.virustotal.com/gui/ip-address/190.115.21.130/relations

Code:

www.muskgift.net
www.cn.defio.io
www.test.elonxpromo.com
www.rapidlyvanilla.com
www.defio.io
www.bitcoin.issfinance.com
ww1.info-prav-centr.com
www.ww1.info-prav-centr.com
www.wp.elonxpromo.com
www.blog.elonxpromo.com
www.store.test.auction-today.com
shop.crm.reducehunger.net
www.shop.crm.reducehunger.net
old.test.andijanpetro.com
www.old.test.andijanpetro.com
test.dev.overworld.pro
www.test.dev.overworld.pro

All has has similar and fake giveaway

Code:

https://xrp2020.net/

IP relations
https://www.virustotal.com/gui/ip-address/77.83.173.172/relations

Code:

xrpx10.org
xrpreceive.net
awayxrp.net
www.2020xrp.net
www.getxrp.org
www.claimxrp.net
www.2020xrp.com
www.xrpclaim.org
www.receivexrp.com
www.claimxrp.org
www.2020xrp.org
www.ripple.re
www.xrp2020.net
www.myxrp.org
www.xrp2020.org
www.xrpaway.org
www.giveawayseptember.com

Be careful scammer always make new site and similiar fake giveaway/phising, don't click any link to avoid malware injection into your PC.

[Chikito]

Be aware fake giveaway and phishing

1.

Code:

https://telegra.ph/Official-Competition-rules-02-17-2 

Don't sent anything, this is fake competition




2.

Code:

https://fiddle.jshell.net/ug9L52of/4/show/

Fake Ethereum Giveaway



Scammer will dissapear after you send your ethereum


3.

Code:

https://telegra.ph/Binance-New-Fiat-Listings-02-19  

Fake Bitcoin giveaway by fake CZ Binance




4.

Code:

https://telegra.ph/Bitcoin-Halving-and-New-Fiat-Listings-to-Binance-02-18

CZ Binance never giveaway cryptocurrency



Be Careful

[Chikito]

[Scam] Fake Vitalic butterin Give away using medium blog

Code:

https://medium.com/@vitalikbuterinceo/ethereum-eth-2-0-news-67094a3f4331

To participate you just need to send between 5 ETH to 500+ ETH to the contribution address and we will immediately send you back between 10 ETH to 5000 ETH the address you sent it from. Every person can participate only one time; the minimum contribution is 5 ETH and the maximum contribution is 500 ETH.
- For example If you send 10–50+ ETH , you will be airdropped 100 ETH back.

[Chikito]

Be aware cloning and phishing blender.io

Code:

blendér.io

Code:

http://xn--blendr-fva.io

You can see different domain and address service

And more clonning and phishing fund by @logfiles

Code:

https://blender.work

Please help to report it all to https://safebrowsing.google.com/safebrowsing/report_phish/?hl=en


Real Website: https://blender.io

Service address: 1Fd1zWsLCP8okiExCrhzvU4TD8zKYfgbZ1

[dragonvslinux]

Nice topic. It's very useful to remember that phishing websites work due to human error, not just that of clicking the wrong link, but in this case typing the wrong link.
For anyone concerned about this remember to check the SSL certificate of the website. I also strongly recommend using a chromium-based browser to warn you of scams.

For example, by typing electrum wrong and entering the phishing link url takes me here, instead of taking you directly to the scam:



If a big red flag doesn't warn you not to proceed, then you probably can't be helped  

[Chikito]

For example, by typing electrum wrong and entering the phishing link URL takes me here, instead of taking you directly to the scam:

a warning will appear if website have been reported.


More fake/phishing Elon musk give away available every day, we must be careful, Elon musk or any relevant never give away Bitcoin and altcoin, those sites will scamming you by sending malware and never sending back what you sent.

here, I was found today:

Code:

https://teslafree.info/
https://teslagoods.info
https://muskgive.net/
https://muskbtc.com/

when we Look at the picture, scammer use fake medium for scamming purpose

domain information:

Code:

Domain Name: teslagoods.info
Registry Domain ID: D503300001183427476-LRMS
Registrar WHOIS Server: whois.namesilo.com
Registrar URL: http://www.namesilo.com
Updated Date: 2020-03-03T07:45:18Z
Creation Date: 2020-03-03T07:31:51Z
Registry Expiry Date: 2021-03-03T07:31:51Z
Registrar Registration Expiration Date:
Registrar: Namesilo, LLC
Registrar IANA ID: 1479

Be careful.

[Baofeng]

Last couple of days:

Code:

 https://btcethpromo.info/
https://www.musk20.com/
https://teslagoods.info/
https://elonlive.com/
http://btcmusk.net/
https://muskpromo.cloud/
https://elonmuskgive.net/
https://4musk.top/
https://ethereum-eth.info/

Same images being used, sometimes it's tiring to hunt for this kind of phishing websites, but if you think the people you are going to save in this community by giving them warnings, it's worth in the end.

[Chikito]

Same images being used, sometimes it's tiring to hunt for this kind of phishing websites, but if you think the people you are going to save in this community by giving them warnings, it's worth in the end.

same like this, using fake medium and "double your crypto" scheme

Code:

https://eventcrypto.org/btc/
https://eventcrypto.org/
https://spacex.expert/eth/
https://spacex.expert/btc/
https://spacex.expert/
https://gatesgive.com/
https://eloncoin.info/eth/
https://eloncoin.info/btc/
https://eloncoin.info/
https://elonbtc.press/xrp/
https://elonbtc.press/eth/
https://elonbtc.press/btc/
https://elonbtc.press/
https://eventcrypto.net/eth/
https://eventcrypto.net/btc/
https://eventcrypto.net/
https://eventcrypto.me/
https://spacex.press/eth/
https://spacex.press/btc/

All reported and this not yet over, scammer every day trying to scam people by using fake and phishing give away, be careful.

[TravelMug]

Another Elon Musk fake giveaway

Code:

https://bitcoinelon.com/

Whois Record for BitCoinElon.com
How does this work?
Domain Profile
Registrant    Protection of Private Person
Registrant Country    ru
Registrar    Registrar of domain names REG.RU LLC REGISTRAR OF DOMAIN NAMES REG.RU LLC
IANA ID: 1606
URL: https://www.reg.com,https://www.reg.ru,http://www.reg.ru
Whois Server: whois.reg.com

(p)
Registrar Status    clientTransferProhibited
Dates    17 days old
Created on 2020-03-03
Expires on 2021-03-03
Updated on 2020-03-03    
 
Name Servers    NS1.REG.RU (has 1,502,646 domains)
NS2.REG.RU (has 1,502,646 domains)
   
 
Tech Contact    Protection of Private Person
PO box 87, REG.RU Protection Service,
Moscow, 123007, ru

(p) (f)
IP Address    194.58.112.174 - 175,467 other sites hosted on this server
   
 
IP Location    Russian Federation - Moskva - Moscow - Domain Names Registrar Reg.ru Ltd
ASN    Russian Federation AS197695 AS-REG, RU (registered Mar 28, 2011)
Domain Status    Registered And Active Website

https://www.virustotal.com/gui/ip-address/194.58.112.174/relations




BTC address:

Code:

36NxXedkXecvw9VbyGTUd4Fm9tMgpVHv3u

[Baofeng]

Cyber criminals attempt on QR code:

Code:

 http://bitcoin-barcode-generator.com/ 

archived: http://web.archive.org/save/http://bitcoin-barcode-generator.com/




archived: http://web.archive.org/save/http://btc-to-qr.com/

[Chikito]

Cyber criminals attempt on QR code:

Thanks for adding those scam.

I try using it and got different address generated



And was scanned, My address changed into scammer address 343CXYVBKXT2VgELCdjEeMyPpfiKwkzUNg.

We must be careful before using any Tool, be sure to always double check. because QR code as the results cannot be seen immediately.

[Baofeng]

Another new form of scam, I reported a similar theme/style from the scammers, [Scam]: Atomic wallet Complaint Form

Code:

PHISHING SITE: https://jaxx.live/

[Baofeng]

Another fake Elon Musk Giveaway:

Code:

 Phishing site: https://mdl3.top/

Registrar    Key Systems LLC
IANA ID: 1345
URL: http://www.key-systems.net
Whois Server: whois.rrpproxy.net

(p)
Registrar Status    clientTransferProhibited
Dates    20 days old
Created on 2020-03-07
Expires on 2021-03-07
Updated on 2020-03-26    
 
Name Servers    NS1.HOSTING.REG.RU (has 1,510,929 domains)
NS2.HOSTING.REG.RU (has 1,510,929 domains)
   
 
Tech Contact    —
IP Address    31.31.198.109 - 1,017 other sites hosted on this server
   
 
IP Location    Russian Federation - Moskva - Moscow - Domain Names Registrar Reg.ru Ltd
ASN    Russian Federation AS197695 AS-REG, RU (registered Mar 28, 2011)
Hosting History    5 changes on 3 unique name servers over 2 years

http://whois.domaintools.com/mdl3.top

[Baofeng]

( 1 ) Bitcoin doubler, I will assume that all transactions there are fake just to lure potential victims.

I also try to find the registered company, but so far I didn't get a hit so obviously, they wanted to look legit by having a company number but its all fake.

Code:

https://crypto-crown.ltd/

( 2 ) Another one:

Code:

https://bit-coinvestor.com/

[Chikito]

I also try to find the registered company, but so far I didn't get a hit so obviously, they wanted to look legit by having a company number but its all fake.

Code:

https://crypto-crown.ltd/

https://www.virustotal.com/gui/ip-address/193.233.15.195/relations
IP address 193.233.15.0
using Smart Telecom S.A.R.L office at Beirut > https://www.ripe.net/membership/indices/data/lb.smarttelecom.html

I am try to look up that's IP > https://ipinfo.io/AS51558, Still not find company name. just country, i am not sure about it.
https://ipinfo.io/193.233.15.195

Code:

City Cascade
Region Cascade
Coordinates -4.6667,55.5000
Timezone Indian/Mahe
Local Time April 01, 2020 | 04:02 PM
Country Seychelles

[Chikito]

Fake/Phishing Binance Promo Give away

Code:

http://binancepromo.com/

IP Address: 108.168.157.70
Detected as Malicious > https://www.virustotal.com/gui/ip-address/108.168.157.70/detection



Be careful..

[Baofeng]

Another list of fake giveaways:

Code:

http://ethventure.com/

Code:

Whois Record for EthVenture.com
 Domain Profile
IP Address	31.31.196.105 - 528 other sites hosted on this server
  
IP Location	Russian Federation - Moskva - Moscow - Domain Names Registrar Reg.ru Ltd
ASN	Russian Federation AS197695 (registered Mar 28, 2011)
Domain Status	Registered And Active Website
IP History	9 changes on 9 unique IP addresses over 2 years	  
Registrar History	2 registrars with 1 drop	  
Hosting History	7 changes on 7 unique name servers over 3 years	Hosting History 

http://whois.domaintools.com/ethventure.com

Code:

https://ethdrop.me/

Code:

Whois Record for EthDrop.me
 Domain Profile
Registrant Org	WhoisGuard, Inc.
Registrant Country	pa
Registrar	NameCheap, Inc.
IANA ID: 1068
URL: www.namecheap.com
Whois Server: whois.namecheap.com

(p)
Registrar Status	clientTransferProhibited, serverTransferProhibited
Dates	8 days old
Created on 2020-04-04
Expires on 2021-04-04
Updated on 2020-04-09	  
Name Servers	IGNAT.NS.CLOUDFLARE.COM (has 22,166,372 domains)
KINSLEY.NS.CLOUDFLARE.COM (has 22,166,372 domains)

http://whois.domaintools.com/ethdrop.me

[Chikito]

Another list of fake giveaways:

Code:

http://ethventure.com/

I found any related fake/phishing same IP : https://www.virustotal.com/gui/ip-address/31.31.196.105/relations

Code:

https://eth-ethereum.ltd/
www.bitkoinproject.ru

Code:

https://ethdrop.me/

related IP > https://www.virustotal.com/gui/ip-address/104.28.29.108/relations

Code:

http://wordcoin.online

We should ve careful and please report it > https://safebrowsing.google.com/safebrowsing/report_phish/?hl=en

[Baofeng]

Ethereum and Bitcoin generator scammer website. And obviously, the same people are behind.

(1)

Code:

http://ethereum.cryptogenerator.live/

(2)

Code:

http://bitcoin.cryptogenerator.live/

Code:

 Domain Profile
Registrant	REDACTED FOR PRIVACY
Registrant Org	Domain Protection Services, Inc.
Registrant Country	us
Registrar	Name.com, Inc.
IANA ID: 625
URL: http://www.name.com
Whois Server: whois.name.com

(p)
Registrar Status	autoRenewPeriod, clientTransferProhibited
Dates	383 days old
Created on 2019-04-01
Expires on 2021-04-01
Updated on 2020-04-09	  
Name Servers	NS8255.HOSTGATOR.COM (has 1,843,663 domains)
NS8256.HOSTGATOR.COM (has 1,843,663 domains)
  
Tech Contact	REDACTED FOR PRIVACY
REDACTED FOR PRIVACY,
REDACTED FOR PRIVACY, REDACTED FOR PRIVACY, REDACTED FOR PRIVACY, REDACTED FOR PRIVACY
(p) (f)
IP Address	91.195.240.94 - 305,971 other sites hosted on this server

http://whois.domaintools.com/cryptogenerator.live

[Chikito]

Again, Fake give away by fake Elon musk

Code:

https://promomusk.me/

A hundred transactions appear on the website using this address 1DZrNJ3V38x2VSHVk3yPT5gnyQRVZTujcC are fake, we can see address only have 2 real transactions.

[NotATether]

Ethereum and Bitcoin generator scammer website. And obviously, the same people are behind.

You know, I almost fell for one of these when I was a newbie. These kind of sites sucker in a lot of unsuspecting people.

I'm busy compiling the scam links in this thread into an adblocker filter.

[Baofeng]

Obvious fake XRP give-away, using Tumblr as the medium.

Code:

https://aprilcontest.tumblr.com/

[Baofeng]

Another Fake ETH giveaway:



Archived: http://web.archive.org/save/https://giveaway.revproject.site/

Code:

Whois Record for RevProject.site
 Domain Profile
Registrant Org	Privacy Protect, LLC (PrivacyProtect.org)
Registrant Country	us
Registrar	Beget LLC
IANA ID: 3806
URL: https://beget.com
Whois Server: whois.beget.com

(p)
Registrar Status	clientTransferProhibited, serverTransferProhibited
Dates	11 days old
Created on 2020-04-24
Expires on 2021-04-24
Updated on 2020-04-29	  
Name Servers	NS1.BEGET.COM (has 487,825 domains)
NS1.BEGET.PRO (has 91,047 domains)
NS2.BEGET.COM (has 487,825 domains)
NS2.BEGET.PRO (has 91,047 domains)
  
Tech Contact	—
IP Address	87.236.16.14 - 1,595 other sites hosted on this server[/quote]

http://whois.domaintools.com/revproject.site

[Chikito]

Another Fake ETH giveaway:
Archived: http://web.archive.org/save/https://giveaway.revproject.site/

Code:

IP Address	87.236.16.14

https://www.virustotal.com/gui/ip-address/87.236.16.14/relations



Seem that IP's has relationship with another fake/phising electrum wallet

Code:

http://www.electrumwallet.buzz/#home
http://www.walletelectrum.com/#home

archived1 and archived2



Be careful


Real Electrum is https://electrum.org

[Baofeng]

Here is another bitcoin generator, be careful we are approaching halving, maybe newbies think that they can simply earn free bitcoin.

Code:

http://bitgen.pro/

[Chikito]

Be aware fake Steve Wozniak Bitcoin Giveaway

Code:

https://telegra.ph/Steve-Wozniak-Foundation-15000-Bitcoin-Giveaway-Airdrop-05-10
http://wozniakbit.com

scammer wallet https://www.blockchain.com/btc/address/1EQaEux5fu7uTGkrDBR2RRARwbqDFMALPw still empty, no transaction.

Scammer IP relationship https://www.virustotal.com/gui/ip-address/107.150.102.158/relations

Code:

elonhelper.io

Domain/IP Information:

Code:

IP Address: 107.150.102.158
Domain Name: wozniakbit.com
Registry Domain ID: 2524219619_DOMAIN_COM-VRSN
Registrar WHOIS Server: whois.eranet.com
Registrar URL: http://www.eranet.com
Updated Date: 2020-05-11T05:58:48Z
Creation Date: 2020-05-10T08:14:42Z
Registry Expiry Date: 2021-05-10T08:14:42Z
Registrar: Eranet International Limited

Always be careful.

[OmegaStarScream]

exodusupdate.com (Found by UnDerDoG81).

Domain information:

Code:

Registrar	NAMECHEAP INC NameCheap, Inc.
IANA ID: 1068
URL: http://www.namecheap.com
Whois Server: whois.namecheap.com

Registrar Status	addPeriod, clientTransferProhibited
Dates	44 days old
Created on 2020-04-02
Expires on 2021-04-02
Updated on 0000-12-31	

In addition to reaching out to Exodus support (as mentioned in the ilnk above)... I scanned the .exe and no malware were found, but once I ran the .exe (using Sandboxie), it started downloading other files .vbs and .bat files (which most likely contain malicious code).

[Chikito]

exodusupdate.com (Found by UnDerDoG81).

Thanks for Information. Look like that site has linking to some other. when I try searching the relationship, I find fake Bitcoin giveaway site.

https://www.virustotal.com/gui/ip-address/199.188.200.50/relations



Another relationship, Maybe Ponzi scheme

Code:

https://crypto-hub.net/
https://www.trade-coins.co/

All related to exodusupdate.com with a same IP address.

[Baofeng]

It's already been blocked by EAL.

And this is the official link: https://www.exodus.io

Code:

 exodusupdate.com 

[Baofeng]

First time that the scammers are using Xiaomi name to create a fake bitcoin giveaway.

Website:

Code:

https://xiaomibtc.com

Bitcoin address of the scammers:

Code:

37KPhFEL1uZqoJBpYq22ZGahaBc23ActpF

[Chikito]

First time that the scammers are using Xiaomi name to create a fake bitcoin giveaway.
Website:

Code:

https://xiaomibtc.com

- Adding more popular name -

Fake popular name Bitcoin give away

IP Address: 77.83.173.172 >> https://www.virustotal.com/gui/ip-address/77.83.173.172/relations

Code:

www.chambtc.org
www.shrembtc.com
www.steveb.group
www.stevebtc.org
www.brinbtc.net

Code:

https://chamath-btc.com

https://www.virustotal.com/gui/ip-address/104.24.108.170/relations

Code:

https://alanbtc.com/

https://www.virustotal.com/gui/ip-address/104.27.183.23/relations

Code:

https://josephbtc.com

https://www.virustotal.com/gui/ip-address/104.18.36.48/relations

Code:

https://fordbtc.org/

https://www.virustotal.com/gui/ip-address/195.24.68.16/relations

Code:

https://telegra.ph/Dave-Ramsey-5000-BTC-Giveaway-05-17

Code:

https://telegra.ph/5000-Bitcoin-Giveaway-05-12

Code:

https://telegra.ph/Tony-Robbins-5000-Bitcoin-Giveaway-Airdrop-05-14

Code:

https://telegra.ph/Steve-Wozniak-Foundation-5000-Bitcoin-Giveaway-Airdrop-05-14-3

Code:

https://bransonbtc.com/

Code:

http://bloombergbtc.net/

...

and many more...

I am just say, Be careful!.

don't send anything!

They don't giveaway Bitcoin.

[Chikito]

This IP address has Alot of fake and Phishing Giveaway

https://www.virustotal.com/gui/ip-address/77.83.173.172/relations
https://www.virustotal.com/gui/ip-address/178.159.42.11/relations

Website:

Code:

www.chambtc.us
www.chambtc.org
www.shrembtc.com
www.steveb.group
www.stevebtc.org
www.brinbtc.net
www.brinbtc.org
www.winkbtc.com
www.robertki.org
www.jackmabtc.com
www.gates.promo
www.xrp.claims
www.xrp.work
www.xrp.group
www.20xrp.tech
www.xrptake.live
www.takexrp.live
www.geteth.live
www.xrpdrop.me
www.xrp20.com
www.20xrp.org
20xrp.org
xrp20.com
xrptop.com
www.20xrp.com
www.topxrp.com
xrpx10.org
xrpreceive.net
awayxrp.net
www.2020xrp.net
www.getxrp.org
2020-01-28
www.claimxrp.net
www.2020xrp.com
claimxrp.net
xrpclaim.org
www.xrpclaim.org
www.receivexrp.com
2020-01-28
receivexrp.com
www.claimxrp.org
www.2020xrp.org
www.ripple.re
www.xrp2020.net
www.myxrp.org
www.xrp2020.org
xrpaway.org
www.xrpaway.org
www.giveawayseptember.com
giveawayseptember.com

Example picture

[Chikito]

Seems, exodus wallet favorite name purpose phishing, be careful always double check before entering.

Code:

http://exodus.com.swtest.ru/bitcoin-wallet.html

Domain information

Code:

IP-Address from DNS Host Lookup: 77.222.40.109

Domain Name: exodus.com.swtest.ru

Top Level Domain: RU (Russian Federation)

Geolocation: RU (Russian Federation), N/A, N/A, N/A N/A - Google Maps

Reverse DNS: vh286.sweb.ru

domain has injected virus

https://www.virustotal.com/gui/ip-address/77.222.40.109/relations

[Baofeng]

Another fake XRP giveaway:

Code:

https://www.ripple.re/ 

And this scam cloud mining site, claiming to give exorbitant returns.

Code:

https://miningbase.cloud/

[Baofeng]

Bitcoin double here. Do not send any Bitcoin or Ethereum on this site.

Code:

http://getbtcx.com/btc.html
http://getbtcx.com/eth.html

[vlad230]

It seems the scammers went even further. They created a youtube channel called 'SpaceX Live' where they promote these scams.

There's a live video with SpaceX people talking about the launch: https://www.youtube.com/watch?v=a07f5F-Mcqg
I have reported the video for scams but it seems like it wasn't taken down yet.

Websites:

Code:

https://elonmuskdrop.com/
https://muskbtc.us/

Do NOT send your BTC to these addresses!

https://bitref.com/16V9ozW6499fJWmYebPcpNpq8P1BBbmjdV
https://bitref.com/1SpaceMrzPknno6Bpf3NnvARiRnDrK7Ln
They managed to get some BTC out of idiots after all

Later EDIT: The video was taken down now

[Baofeng]

Fake Exodus website, as usual the feel and looks are the same here, you can easily get trick by it if you are not that very careful and it is obvious a phish site, just two days old.

Real website: https://www.exodus.io/

Code:

 PHISHING SITE - https://exodus.vc/

Whois Record for Exodus.vc
How does this work?
 Domain Profile
Registrant Country   br
Registrar   Gandi SAS
IANA ID: 81
URL: http://www.gandi.net
Whois Server: whois.gandi.net

(p)
Registrar Status   addPeriod, clientTransferProhibited, serverTransferProhibited
Dates   2 days old
Created on 2020-06-05
Expires on 2021-06-05
Updated on 2020-06-05

https://whois.domaintools.com/exodus.vc

[Baofeng]

Fake Jaxx.io website, if you type an extra "x" on it, you might get trap, so just be careful and bookmark as scammers are mostly using this kind of typo squatting attacks.

Code:

http://jaxxx.io/

[Baofeng]

Be careful with the following trading platforms, similar themes and UI.

Code:

https://fixxcoin.com/
https://hubcoi.com/
https://hurtrade.com/

[Baofeng]

Be careful with this fake Fusion wallet, don't create or accessed any using this website, they will steal your keys and your crypto.

Code:

https://myfusionwallet.net/

Whois Record for MyFusionWallet.net
How does this work?
 Domain Profile
Registrant   Whois Privacy
Registrant Org   Private by Design, LLC
Registrant Country   us
Registrar   Porkbun LLC
IANA ID: 1861
URL: http://www.porkbun.com,http://porkbun.com
Whois Server: whois.porkbun.com

(p)
Registrar Status   clientDeleteProhibited, clientTransferProhibited
Dates   13 days old
Created on 2020-06-07
Expires on 2021-06-07
Updated on 2020-06-07

https://whois.domaintools.com/myfusionwallet.net

[Chikito]

Be careful with this fake Fusion wallet, don't create or accessed any using this website, they will steal your keys and your crypto.

Code:

https://myfusionwallet.net/

Nice catch, seems That's IP's has another fake/phishing link:

https://www.virustotal.com/gui/ip-address/198.54.120.244/relations



Original Link: https://www.myfusionwallet.com

[Baofeng]

^^ And it really reinforced what we have believed in the past, those scammers are really connected to each other and probably colluding with other criminals as well. Cheap domain hosting + parking it for sometime before making their move and then recycle.

[Chikito]

^^ And it really reinforced what we have believed in the past, those scammers are really connected to each other and probably colluding with other criminals as well. Cheap domain hosting + parking it for sometime before making their move and then recycle.

Easy way to scammer use cheap provider VPS and make new domain.

like today I found new "Elon musk" again with one IP.

Code:

https://musk-live.com/

https://www.virustotal.com/gui/ip-address/68.183.101.122/relations

Code:

2020-06-21 www.musk-live.com
2020-06-21 www.musk-events.com
2020-06-21 www.elon-live.com
2020-06-20 www.officialelon.com
2020-06-19 www.elonofficial.com
2020-06-15 www.elonmk.com

Scammer made all those phishing only 1 week.

[Baofeng]

New Paxful phishing site:

And there's no such thing as paxful offers, do not enter your credentials here.

Code:

http://paxfuloffers.com/

Original Site: https://paxful.com/

[Baofeng]

Fake or clone Callisto wallet:

Code:

https://clowallet.network/

This is the original: https://wallet.callisto.network/

But as you can see, very very similar in terms of look and feel of the original site.

[Baofeng]

Bitcoin doubler/Ponzi scheme spotted:

Just look at those profits you are going to make in 24-48 hours, Lol. For those newbies, doubler is a scam don't deposit or try it for yourself, not even a small amount.

Code:

https://growbitcoin.co.uk/

[Chikito]

Fake or clone Callisto wallet:

Code:

https://clowallet.network/

Same like before, usually scammer using same IP address to make new phishing and scam domain,

https://www.virustotal.com/gui/ip-address/5.45.114.95/relations



see

Code:

etzwallet.net
www.oldetherwallet.com

[Baofeng]

Fake https://guarda.co/app/. Look at the spelling and the closeness of the website interface.

Code:

PHISHING SITE: https://guadra.com/app/create

This is the original: https://guarda.co/app/

Fake site domain info:

Whois Record for GuaDra.com
 Domain Profile
Registrant   WhoisGuard Protected
Registrant Org   WhoisGuard, Inc.
Registrant Country   pa
Registrar   NAMECHEAP INC NameCheap, Inc.
IANA ID: 1068
URL: http://www.namecheap.com
Whois Server: whois.namecheap.com

(p)
Registrar Status   addPeriod, clientTransferProhibited
Dates   41 days old
Created on 2020-05-21
Expires on 2021-05-21
Updated on 0000-12-31    
Name Servers   DNS1.NAMECHEAPHOSTING.COM (has 870,791 domains)
DNS2.NAMECHEAPHOSTING.COM (has 870,791 domains)
 
Tech Contact   WhoisGuard Protected
WhoisGuard, Inc.
P.O. Box 0823-03411,
Panama, Panama, pa

(p) (f)
IP Address   198.187.29.150 - 635 other sites hosted on this server
 
IP Location   United States Of America - Georgia - Atlanta - Namecheap Inc.
ASN   United States Of America AS22612 NAMECHEAP-NET, US (registered Jun 21, 2011)
Domain Status   Registered And Active Website

https://whois.domaintools.com/guadra.com

[Chikito]

Code:

PHISHING SITE: https://guadra.com/app/create

I found new one, checked using https://dnstwister.report/search?ed=6775617264612e636f

Code:

http://wwwguarda.co/

the relationship of https://www.virustotal.com/gui/ip-address/104.203.20.6/relations

Code:

wwwthetatoken.org

and more...

IP Information

Code:

NetRange: 104.202.0.0 - 104.203.255.255
CIDR: 104.202.0.0/15
NetName: ENZUINC-US-BLK16
NetHandle: NET-104-202-0-0-1
Parent: NET104 (NET-104-0-0-0-0)
NetType: Direct Allocation
OriginAS: AS18978
Organization: Enzu Inc (ENZUI)
RegDate: 2014-09-09
Updated: 2016-05-24
Comment: --------------------------------
Comment: Enzu Inc.
Comment: 10120 S Eastern Ave
Comment: Suite #248
Comment: Henderson, NV 89052
Comment: https://www.enzu.com
Comment: --------------------------------
Comment: Please send all Abuse, Trademark,
Comment: Legal Compliance, and Law Enforcement
Comment: requests to abuse@scalabledns.com
Ref: https://rdap.arin.net/registry/ip/104.202.0.0

[Baofeng]

Bitcoin doubler:

Please stay away from this site, and don't deposit anything.

Code:

https://bit-airdrop.club/

[Chikito]

Fake ADA Cordano giveaway

Code:

https://event-ada.info
http://ada-cardano.info/

Domain:

IP Address: 172.67.131.47

Geolocation: US (United States), CA, California, 94107 San Francisco - Google Maps

Reverse DNS entry: not found

Domain Check

Domain Name: event-ada.info

Top Level Domain: INFO (Information)

Domain Name: EVENT-ADA.INFO
Registry Domain ID: D503300001185956611-LRMS
Registrar WHOIS Server: whois.namecheap.com
Registrar URL: www.namecheap.com
Updated Date: 2020-07-13T00:45:31Z
Creation Date: 2020-07-13T00:41:40Z
Registry Expiry Date: 2021-07-13T00:41:40Z
Registrar Registration Expiration Date:
Registrar: NameCheap, Inc

Fake Kanyewest US President Giveaway

Code:

http://kanyebtc.org/

IP Address: 195.24.68.4

Geolocation: RU (Russian Federation), 48, Moscow City, 101752 Moscow - Google Maps

Reverse DNS: wcarp.hosting.nic.ru

Domain Check

Domain Name: kanyebtc.org

Top Level Domain: ORG (Organization)

Domain Name: KANYEBTC.ORG
Registry Domain ID: D402200000014076562-LROR
Registrar WHOIS Server: https://www.nic.ru/whois
Registrar URL: https://www.nic.ru/whois
Updated Date: 2020-07-09T22:50:25Z
Creation Date: 2020-07-09T22:50:25Z
Registry Expiry Date: 2021-07-09T22:50:25Z
Registrar Registration Expiration Date:
Registrar: Regional Network Information Center, JSC dba RU-CENTER
Registrar IANA ID: 463

Be Aware!

[Baofeng]

Another one of Fake Elon Musk giveaway:

Code:

https://muskpromotion.com/

Bitcoin address:

Code:

1MuskJozYFQ56EVxHzg2rcZjPV91QNBH3H

And has scammed a total of 0.00453667 BTC already.

Registrant   Protection of Private Person
Registrant Country   ru
Registrar   Registrar of domain names REG.RU LLC REGISTRAR OF DOMAIN NAMES REG.RU LLC
IANA ID: 1606
URL: https://www.reg.com,https://www.reg.ru,http://www.reg.ru
Whois Server: whois.reg.com

(p)
Registrar Status   clientTransferProhibited
Dates   57 days old
Created on 2020-05-22
Expires on 2021-05-22
Updated on 2020-05-22

[Chikito]

Fake giveaway cardano and gemini

Code:

https://www.cardano-event.com/

IP Address: 104.27.128.135
Domain Name: CARDANO-EVENT.COM
Registry Domain ID: 2545876763_DOMAIN_COM-VRSN
Registrar WHOIS Server: whois.namecheap.com
Registrar URL: http://www.namecheap.com
Updated Date: 2020-07-15T23:05:43Z
Creation Date: 2020-07-13T21:13:24Z

Code:

https://geminibtc.net/

IP Address: 190.115.30.224
Domain Name: GEMINIBTC.NET
Registry Domain ID: 2541998136_DOMAIN_NET-VRSN
Registrar WHOIS Server: whois.PublicDomainRegistry.com
Registrar URL: http://www.publicdomainregistry.com
Updated Date: 2020-06-27T00:27:59Z
Creation Date: 2020-06-27T00:27:33Z

[Baofeng]

Fake ETH Airdrop:



ETH address

Code:

0xCE07e6D4aDCb3924011fc247C42eB51084207acA

Whois Record for VitalIk.top
 Domain Profile
Registrant   REDACTED FOR PRIVACY
Registrant Org   Tye Dye Eye
Registrant Country   us
Registrar   Eranet International Limited
IANA ID: 1868
URL: http://www.eranet.com
Whois Server: whois.eranet.com

(p)
Registrar Status   clientTransferProhibited
Dates   5 days old
Created on 2020-07-16
Expires on 2021-07-16
Updated on 2020-07-16   

https://whois.domaintools.com/vitalik.top

[Baofeng]

And it keeps on coming guys. This Elon Musk giveaways won't stop, Lol.

Code:

https://elonpromo.org/ 

Registrant Org   Privacy Protection
Registrant Country   ru
Registrar   Registrar of Domain Names REG.RU LLC
IANA ID: 1606
URL: http://www.reg.com
Whois Server: whois.reg.com

(p)
Registrar Status   clientTransferProhibited, serverTransferProhibited
Dates   8 days old
Created on 2020-07-23
Expires on 2021-07-23
Updated on 2020-07-23     
Name Servers   NS1.REG.RU (has 1,568,097 domains)
NS2.REG.RU (has 1,568,097 domains)
  
Tech Contact   —
IP Address   190.115.21.141 is hosted on a dedicated server
  
IP Location   Belize - Belize - Belize City - Ddos-guard Corp.
ASN   Belize AS262254 DDOS-GUARD CORP., BZ (registered Dec 05, 2012)
Domain Status   Registered And No Website
Hosting History   1 change on 2 unique name servers over 0 year

https://elonpromo.org/

[Chikito]

And it keeps on coming guys. This Elon Musk giveaways won't stop, Lol.

Code:

https://elonpromo.org/ 

find same elon musk like your picture too,

Fake Elon Musk still running give away right now;

Code:

https://muskx.co/

IP Address: 45.87.80.145
Domain Name: muskx.co
Registry Domain ID: D093EDEC5DF604FF790F5CC3C10F2E12C-NSR
Registrar WHOIS Server: whois.registrar.eu
Registrar URL: www.openprovider.com
Updated Date: 2020-07-09T10:49:53Z
Creation Date: 2020-07-04T10:49:47Z

Linked to twitter promo https://www.virustotal.com/gui/url/41aa22a7aded71b4d1192265bea003eff3945ef59e9d030c8a2c842d0d7bbae7/details





Keep your mind and be careful Fake giveaway from fake famous people

[Chikito]

Scam fake Elon musk Official Giveaway 5000 BTC

Code:

http://Giveaway.is

IP Address: 162.255.119.70
domain: giveaway.is
nserver: dns1.registrar-servers.com
nserver: dns2.registrar-servers.com
dnssec: unsigned delegation
created: August 2 2020
expires: August 2 2021

https://www.blockchain.com/btc/address/1D4ZoJ7MLhija5iaSjhnwiAdATNLdVfdVk
Hope no body sending fund into scammer address

[Chikito]

Fake ethereum 2.0 project website (doubling ethereum by sending fund into scammer address)

Code:

https://2ethereum.org/

IP Address: 190.115.21.113
Domain Name: 2ethereum.org
Top Level Domain: ORG (Organization)
Registry Domain ID: D402200000014234500-LROR
Registrar WHOIS Server: whois.reg.com
Registrar URL: http://www.reg.com
Updated Date: 2020-07-27T21:13:36Z
Creation Date: 2020-07-27T20:18:40Z
Registry Expiry Date: 2021-07-27T20:18:40Z
Registrar Registration Expiration Date:
Registrar: Registrar of Domain Names REG.RU LLC

someone already got scammed https://etherscan.io/address/0x3ad072778446db654dee3ff5f80ac1e5ac12dd56#comments

Be careful

[$crypto$]

And it keeps on coming guys. This Elon Musk giveaways won't stop, Lol.

Elon Musk's giveaway is coming again and like that it will continue to appear with new domains.

Fake Giveaway

Website;

Code:

https://tslahelp.me/

Archived; http://archive.is/0ACsz

Domain Name: TSLAHELP.ME
Registry Domain ID: D425500000334572980-AGRS
Registrar WHOIS Server: whois.registrar.eu
Registrar URL: www.openprovider.com
Updated Date:
Creation Date: 2020-08-07T04:52:23Z
Registry Expiry Date: 2021-08-07T04:52:23Z
Registrar Registration Expiration Date:
Registrar: Hosting Concepts B.V. d/b/a Openprovider Registrar
Registrar IANA ID: 1647
Registrar Abuse Contact Email:
Registrar Abuse Contact Phone: +31.104482297

[Chikito]

be aware fake or phishing myethereum wallet

Code:

https://myetherwallet.com-to-the-access.com/index.php?

https://www.virustotal.com/gui/url/f6eef9a60ff436e51d729b5978d57c62bddaed38386c5781f883ec7b34304604/detection

Domain Name: myetherwallet.com-to-the-access.com

Top Level Domain: COM (Commercial TLD)

IP Address: 104.31.85.13

I found it by searching myetherwallet on google.

be careful don't use google search.

[Chikito]

"elon Musk" come back again

Code:

https://spacex-btc.biz/

Domain Name: spacex-btc.biz
IP Address: 104.28.13.46
Registry Domain ID: D2E1DCB3B1B0248D0B04EE759ED3AED23-NSR
Registrar WHOIS Server: whois.namecheap.com
Registrar URL: http://www.namecheap.com
Updated Date: 2020-08-11T10:47:22Z
Creation Date: 2020-08-06T10:47:17Z

scammer address https://www.blockchain.com/btc/address/13Q4QoEK6uACXGDTGHmyLNoRNaBiAXgho4

[$crypto$]

Elon Musk is back again and they create a community on telegram with the name "Bitrue Community" and they will automatically enroll you in the scamer group.
Beware the newbie who does not know about this.

Website: https://autopoolcrypto.com/
http://archive.is/hcd78



A fake community on behalf of the Bitrue Community

[Baofeng]

Another Ethereum fake giveaway:

Website:

Code:

https://vitalikbb.top/

ETH address:

Code:

 0xCE0aA8921eF80242F03aE1824E31ccF912bA1EB1

[$crypto$]

Fake Binance is back in action on behalf of Airdrop SXP with currently Binance officially launching it so scamers take advantage of it with this kind of situation I hope a lot is avoided and I found it on the telegram channel with a fake telegram account.

Medium Website; https://bin-us.org
Archived; https://archive.is/UcG29

Domain Name: BIN-US.ORG
Registry Domain ID: D402200000014487063-LROR
Registrar WHOIS Server: whois.tucows.com
Registrar URL: http://www.tucows.com
Updated Date: 2020-08-26T13:03:59Z
Creation Date: 2020-08-26T13:01:43Z
Registry Expiry Date: 2021-08-26T13:01:43Z
Registrar Registration Expiration Date:
Registrar: Tucows Inc.
Registrar IANA ID: 69

I don't know why I can't access it via PC, but using a cellphone can be accessed.

[cryptomaniac_xxx]

^^ It can't be accessed because it has been blocked by Google already. Maybe someone has reported this site as a fake site resulting to Google giving us a "Deceptive Site" ahead message. But still a good catch.

[Chikito]

I don't know why I can't access it via PC, but using a cellphone can be accessed.

Like what cryptomaniac said a website has been reported

bin-us.org has been reported as a deceptive site. You can report a detection problem or ignore the risk and go to this unsafe site.
Learn more about deceptive sites and phishing at www.antiphishing.org. Learn more about Firefox’s Phishing and Malware Protection at support.mozilla.org

I think this for a clear browser only, when I try Tor, a website still live.

[$crypto$]

Guys fake Binance guys are back with a new domain name I think they will keep appearing incessantly I always find this picture on the channel on telegram ,,, oh my god when will they stop,

Medium Website; https://supportbnb.com/
Archived; https://archive.is/GKRIj

Domain Name: SUPPORTBNB.COM
Registry Domain ID: 2555885605_DOMAIN_COM-VRSN
Registrar WHOIS Server: whois.tucows.com
Registrar URL: http://tucowsdomains.com
Updated Date: 2020-08-27T09:24:07
Creation Date: 2020-08-27T09:22:19
Registrar Registration Expiration Date: 2021-08-27T09:22:19
Registrar: TUCOWS, INC.
Registrar IANA ID: 69
Domain Status: clientTransferProhibited https://icann.org/epp#clientTransferProhibited
Domain Status: clientUpdateProhibited https://icann.org/epp#clientUpdateProhibited
Registry Registrant ID:

[$crypto$]

I again found a new domain about a fake giveaway from Binance whose site is similar to Medium, I will continue to post here if I find a new domain.

Medium Website: https://bin-crypto.com/
Archived: https://archive.is/wbmt7

Domain Name: BIN-CRYPTO.COM
Registry Domain ID: 2557250329_DOMAIN_COM-VRSN
Registrar WHOIS Server: whois.tucows.com
Registrar URL: http://tucowsdomains.com
Updated Date: 2020-09-02T16:56:38
Creation Date: 2020-09-02T14:11:09
Registrar Registration Expiration Date: 2021-09-02T14:11:09
Registrar: TUCOWS, INC.
Registrar IANA ID: 69
Domain Status: clientTransferProhibited https://icann.org/epp#clientTransferProhibited
Domain Status: clientUpdateProhibited https://icann.org/epp#clientUpdateProhibited
Registry Registrant ID:

[OmegaStarScream]

I found two new phishing sites on /r/ExodusWallet:

#1:

Code:

Domain Name: exiodus.com
Registry Domain ID: 2552253759_DOMAIN_COM-VRSN
Registrar WHOIS Server: whois.registrar.eu
Registrar URL: http://www.registrar.eu
Updated Date: 2020-08-11T13:15:15Z
Creation Date: 2020-08-11T10:58:08Z
Registrar Registration Expiration Date: 2021-08-11T10:58:08Z
Registrar: Hosting Concepts B.V. d/b/a Openprovider

#2:

Code:

Domain Name: exoduz.io
Registry Domain ID: D503300001186353593-LRMS
Registrar WHOIS Server: 
Registrar URL: http://www.ascio.com
Updated Date: 2020-08-30T20:51:42+00:00 2020-08-30
Creation Date: 2020-08-30T16:30:47+00:00 2020-08-30
Registrar Registration Expiration Date: 2021-08-30T16:30:47+00:00 2021-08-30
Registrar: Ascio Technologies, Inc. Danmark - Filial af Ascio technologies, Inc. USA

Both sites are showing in Google ads. Be careful.

[$crypto$]

A new domain is back I will never be bored to keep exposing it here so everyone knows that in every new domain it remains the same in purpose.

Oh my God I always find this on telegram with lots of photo posts in crypto groups.

Stay alert

Medium Website; https://binancefound.com/
Archived; https://archive.is/9MY5M

Domain Name: BINANCEFOUND.COM
Registry Domain ID: 2557660999_DOMAIN_COM-VRSN
Registrar WHOIS Server: whois.publicdomainregistry.com
Registrar URL: www.publicdomainregistry.com
Updated Date: 2020-09-04T12:36:36Z
Creation Date: 2020-09-04T11:14:05Z
Registrar Registration Expiration Date: 2021-09-04T11:14:05Z
Registrar: PDR Ltd. d/b/a PublicDomainRegistry.com
Registrar IANA ID: 303

[Baofeng]

Ethereum fake airdrop, this time no image of Vitalik but still the same modus.

Code:

 http://drop-eth.org/

Registrant Org   Private Person
Registrant Country   ru
Registrar   Registrar of Domain Names REG.RU LLC
IANA ID: 1606
URL: http://www.reg.com
Whois Server: whois.reg.com

(p)
Registrar Status   clientTransferProhibited, serverTransferProhibited
Dates   43 days old
Created on 2020-07-27
Expires on 2021-07-27
Updated on 2020-07-27

https://whois.domaintools.com/drop-eth.org

[Chikito]

Phishing Attempts

Code:

https://bledner.io/

Domain Name: bledner.io
IP Address: 198.54.116.37
Registrar WHOIS Server: whois.namecheap.com
Registrar URL: www.namecheap.com
Updated Date: 2020-07-21T20:24:34Z
Creation Date: 2020-07-21T20:22:34Z
Registrant State/Province: Panama
Registrant Country: PA

bledner.io ≠ blender.io

Original thread > https://bitcointalk.org/index.php?topic=5052876.0

[Chikito]

Fake ripple airdrop

Code:

https://ripplelab.in/
https://x2ripple.com
https://ripple-events.info

https://www.virustotal.com/gui/ip-address/31.170.161.89/relations

https://www.virustotal.com/gui/ip-address/104.18.39.39/relations

Domain Name: X2RIPPLE.COM
Registry Domain ID: 2559500620_DOMAIN_COM-VRSN
Registrar WHOIS Server: whois.namecheap.com
Registrar URL: http://www.namecheap.com
Updated Date: 2020-09-13T15:52:30Z
Creation Date: 2020-09-13T15:34:57Z

[Chikito]

Fake uniswap

Code:

https://uniswapv.com/

IP Address: 160.124.156.102

Domain Name: UNISWAPV.COM
Registry Domain ID: 2561189594_DOMAIN_COM-VRSN
Registrar WHOIS Server: whois.wildwestdomains.com
Registrar URL: http://www.wildwestdomains.com
Updated Date: 2020-09-22T02:43:35Z
Creation Date: 2020-09-22T02:43:35Z

https://www.virustotal.com/gui/ip-address/160.124.156.102/relations

Look at relation IP had a lot of fake website



Be careful!

[Chikito]

Fake Uniswap.ug

Code:

https://uniswap.ug/

All relation fake crypto website https://www.virustotal.com/gui/ip-address/176.113.115.216/relations

Domain Name: uniswap.ug
IP Address: 176.113.115.216
Top Level Domain: UG (Uganda)
Domain Name: uniswap.ug
c/o registry.co.ug
Registrar URL: https://registry.co.ug
Address: 560 Neal Road
North Katie, FL 07395
Registrar: UG Registrar
Registrant Organization: Cooper-Lawrence
Registrant State/Province: 696 Garrett Tunnel
Rebeccaside, UT 05764

More similar

Code:

https://www.boostuni.com/

Fake bitcoin give away

Code:

https://socialbtc.org/

IP Address: 104.28.24.210
Domain Name: socialbtc.org
Top Level Domain: ORG (Organization)
Domain Name: SOCIALBTC.ORG
Registry Domain ID: D402200000014818886-LROR
Registrar WHOIS Server: whois.reg.com
Registrar URL: http://www.reg.com
Updated Date: 2020-10-04T09:42:30Z
Creation Date: 2020-10-04T09:41:24Z

[Chikito]

Fake and Phishing

Code:

https://coin-ex.ru/

IP Address: 185.178.208.155
created: 2020-02-01T20:57:10Z
paid-till: 2021-02-01T20:57:10Z
free-date: 2021-03-04

also direct link into fake site;

Code:

https://besetchange.ru

archived

[Chikito]

Fake Free Give away UNI

Code:

https://www.uni-fund.info/
https://unireward.org/

IP Address: 91.189.114.29
Domain Name: UNIREWARD.ORG
Registry Domain ID: D402200000014861830-LROR
Registrar WHOIS Server: https://www.nic.ru/whois
Registrar URL: https://www.nic.ru/whois
Updated Date: 2020-10-09T08:42:38Z
Creation Date: 2020-10-09T08:42:35Z
Registry Expiry Date: 2021-10-09T08:42:35Z

Fake Swap

Fake governance proposal UNI, don't connect your wallet into this scam site.

Code:

https://unii.finance

IP Address: 44.239.19.102
Domain Name: unii.finance
Registry Domain ID: 219d0ba149204e1aa693f80b96878f85-DONUTS
Registrar WHOIS Server: whois.gandi.net
Registrar URL: https://www.gandi.net
Updated Date: 2020-09-23T19:49:46Z
Creation Date: 2020-09-18T19:48:57Z
Registry Expiry Date: 2021-09-18T19:48:57Z

Be careful

[Chikito]

Phishing Binance website

Code:

https://www.binancezh.com

Code:

https://accounts.binancezh.com/en/login

https://www.virustotal.com/gui/ip-address/76.223.2.151/relations

IP Address: 13.248.150.68
Domain Name: BINANCEZH.COM
Registry Domain ID: 2432105214_DOMAIN_COM-VRSN
Registrar WHOIS Server: grs-whois.hichina.com
Registrar URL: http://www.net.cn
Updated Date: 2020-05-01T01:40:02Z
Creation Date: 2019-09-11T09:07:11Z
Registry Expiry Date: 2022-09-11T09:07:11Z
Registrar: Alibaba Cloud Computing (Beijing) Co., Ltd.

Fake/Phishing Uniswap website

Code:

https://uniswapz.org/#/

IP relationship https://www.virustotal.com/gui/ip-address/199.188.206.67/relations



Let's look similar uniswap.org domain https://dnstwister.report/search?ed=756e69737761702e6f7267

Over identified 200+ domains similar to uniswap.org.

Be careful. Don't input your mnemonic seed!.

[Chikito]

Again, phishing UNISWAP

Code:

https://uniswcp.org
https://www.uniswapex.org/
https://uiniswapv2.com/

Domain Name: UNISWCP.ORG
Registry Domain ID: D402200000014878925-LROR
Registrar WHOIS Server: whois.namecheap.com
Registrar URL: http://www.namecheap.com
Updated Date:
Creation Date: 2020-10-11T13:56:19Z
Registry Expiry Date: 2021-10-11T13:56:19Z
Registrar Registration Expiration Date:
Registrar: NameCheap, Inc.

Phishing JustSwap

Code:

https://justswapv2.com/

Domain Name: JUSTSWAPV2.COM
Registry Domain ID: 2562123388_DOMAIN_COM-VRSN
Registrar WHOIS Server: whois.namecheap.com
Registrar URL: http://www.namecheap.com
Updated Date: 2020-10-06T20:30:16Z
Creation Date: 2020-09-25T22:58:18Z
Registry Expiry Date: 2021-09-25T22:58:18Z
Registrar: NameCheap, Inc.

Most everyday scammer try create the new phishing popular domain for scamming people, so be careful as always.

[Chikito]

Phishing give away

Code:

https://uni-drop.com/

IP Address: 172.67.148.245
Domain Name: UNI-DROP.COM
Registry Domain ID: 2566549887_DOMAIN_COM-VRSN
Registrar WHOIS Server: whois.namecheap.com
Registrar URL: http://www.namecheap.com
Updated Date: 2020-10-17T20:28:37Z
Creation Date: 2020-10-17T20:26:57Z
Registry Expiry Date: 2021-10-17T20:26:57Z
Registrar: NameCheap, Inc.
Registrar IANA ID: 1068
Registrar Abuse Contact Email: abuse@namecheap.com

Scammer address: https://etherscan.io/address/0xFEE8BeE7Bcf1dCDb452807380F096DD7baD838A8#tokentxns

[$crypto$]

What happened: Ethereum Fake Giveaway

Code:

https://ethereum.llc/
https://web.archive.org/web/20201019032623/https://ethereum.llc/

Domain Name: ETHEREUM.LLC
Registry Domain ID: D503300001187475244-LRMS
Registrar WHOIS Server: whois.namecheap.com
Registrar URL: www.namecheap.com
Updated Date: 2020-10-14T00:08:37Z
Creation Date: 2020-10-13T23:23:02Z
Registry Expiry Date: 2021-10-13T23:23:02Z
Registrar Registration Expiration Date:
Registrar: NameCheap, Inc
Registrar IANA ID: 1068

Addres Scammer: https://etherscan.io/address/0x525A963eda51FB3A36730B3C3214946c6A137f55

Edit;

In the wallet address there is already 1 Ether I do not know if this is the victim or their trick to install so many send but I noticed this is not sent except for himself.

[Chikito]

Phishing Uniswap

Code:

https://app.uniswap.ws

Don't insert a mnemonic phrase there!

IP Address: 190.97.166.32

Reverse DNS: host-190-97-166-32.ccipanama.com

Domain Name: app.uniswap.ws

Top Level Domain: WS (Samoa)

The relation IP https://www.virustotal.com/gui/ip-address/190.97.166.32/relations

[Chikito]

Phishing and clone chipmixer dot onion

here the link.

Code:

http://chipmixqo7rmzyfm.onion/
http://chipmixdi3tqpx6p.onion/
http://chipmixenixr6ueq.onion/
http://dslvz6u2utvaylzg.onion/

All the links still alive.

[Baofeng]

They are back with Elon Musk face again:

Website:

Code:

https://musk-coins.com/

Archived: https://archive.is/5HUk2

Registrar    NameSilo, LLC
IANA ID: 1479
URL: https://www.namesilo.com/,http://www.namesilo.com
Whois Server: whois.namesilo.com

(p)
Registrar Status    clientTransferProhibited
Dates    19 days old
Created on 2020-10-16
Expires on 2021-10-16
Updated on 2020-11-02    
  
Name Servers    DNS1.P03.NSONE.NET (has 2,191,036 domains)
DNS2.P03.NSONE.NET (has 2,191,036 domains)
DNS3.P03.NSONE.NET (has 2,191,036 domains)
DNS4.P03.NSONE.NET (has 2,191,036 domains)
   
  
Tech Contact    Domain Administrator
See PrivacyGuardian.org
1928 E. Highland Ave. Ste F104 PMB# 255,
Phoenix, AZ, 85016, us

(p)
IP Address    167.172.215.127 - 12,568 other sites hosted on this server
   
  
IP Location    United States Of America - California - Santa Clara - Digitalocean Llc

[Chikito]

Phishing Uniswap

Code:

https://uniswap.eth.link/

The relation Ip address https://www.virustotal.com/gui/ip-address/35.241.8.114/relations

Code:

http://reality.eth.link/app/
http://pria.eth.link/

Domain Name: uniswap.eth.link
IP Address: 35.241.8.114
Domain Name: eth.link
Registry Domain ID: DO_520b95f2ed11344985fb3673d77ee786-UR
Registrar WHOIS Server: whois.uniregistrar.com
Registrar URL: uniregistrar.com
Updated Date: 2020-09-09T19:33:09.937Z
Creation Date: 2017-07-26T19:31:41.508Z
Registry Expiry Date: 2021-07-26T19:31:41.508Z

Already reported that IP here https://www.abuseipdb.com/
https://www.abuseipdb.com/check/35.241.8.114

[Baofeng]

More of Elon Musk face here:

Code:

https://money-tesla.com/

Archived: https://archive.is/ZUdT6

Registrant    Domain Administrator
Registrant Org    See PrivacyGuardian.org
Registrant Country    us
Registrar    NameSilo, LLC
IANA ID: 1479
URL: https://www.namesilo.com/,http://www.namesilo.com
Whois Server: whois.namesilo.com

(p)
Registrar Status    clientTransferProhibited
Dates    5 days old
Created on 2020-11-03
Expires on 2021-11-04
Updated on 2020-11-04    
 
Name Servers    DNS1.P08.NSONE.NET (has 2,195,035 domains)
DNS2.P08.NSONE.NET (has 2,195,035 domains)
DNS3.P08.NSONE.NET (has 2,195,035 domains)
DNS4.P08.NSONE.NET (has 2,195,035 domains)
   
 
Tech Contact    Domain Administrator
See PrivacyGuardian.org
1928 E. Highland Ave. Ste F104 PMB# 255,
Phoenix, AZ, 85016, us

(p)
IP Address    165.227.0.164 - 24,478 other sites hosted on this server

[Baofeng]

Criminals are still in the trail of Elon Musk face and name:

Code:

https://elonmuskxpro.com/

Archived: https://archive.is/K9BJ8

Registrant    WhoisGuard Protected
Registrant Org    WhoisGuard, Inc.
Registrant Country    pa
Registrar    NAMECHEAP INC NameCheap, Inc.
IANA ID: 1068
URL: http://www.namecheap.com
Whois Server: whois.namecheap.com

(p)
Registrar Status    addPeriod, clientTransferProhibited
Dates    8 days old
Created on 2020-11-01
Expires on 2021-11-01
Updated on 0000-12-31    
  
Name Servers    DNS1.REGISTRAR-SERVERS.COM (has 6,725,888 domains)
DNS2.REGISTRAR-SERVERS.COM (has 6,725,888 domains)
   
  
Tech Contact    WhoisGuard Protected
WhoisGuard, Inc.
P.O. Box 0823-03411,
Panama, Panama, pa

(p) (f)
IP Address    95.181.152.79 - 1 other site is hosted on this server

[Chikito]

Fake UNI Airdrop

Code:

http://uni-airdrop.org/

the relation IP https://www.virustotal.com/gui/ip-address/199.188.206.67/relations

Code:

www.bit2x.uno
https://www.cryptoline.uno/

Fake and phishing, doubled your Bitcoin.



Be aware!. Please help me to report.

[Baofeng]

Another one of the Elon Musk face.

Code:

https://musk-giving.com/

Archived: https://archive.is/p8plD

Registrant    Domain Administrator
Registrant Org    See PrivacyGuardian.org
Registrant Country    us
Registrar    NameSilo, LLC
IANA ID: 1479
URL: https://www.namesilo.com/,http://www.namesilo.com
Whois Server: whois.namesilo.com

(p)
Registrar Status    clientTransferProhibited
Dates    3 days old
Created on 2020-11-14
Expires on 2021-11-14
Updated on 2020-11-14    
  
Name Servers    DNS1.P05.NSONE.NET (has 2,206,178 domains)
DNS2.P05.NSONE.NET (has 2,206,178 domains)
DNS3.P05.NSONE.NET (has 2,206,178 domains)
DNS4.P05.NSONE.NET (has 2,206,178 domains)
   
  
Tech Contact    Domain Administrator
See PrivacyGuardian.org
1928 E. Highland Ave. Ste F104 PMB# 255,
Phoenix, AZ, 85016, us

(p)
IP Address    165.227.12.111 - 19,338 other sites hosted on this server

[Baofeng]

Here's one in Youtube:

Code:

https://www.youtube.com/watch?v=w-5Ojc6YPl8

Website:

Code:

https://telegra.ph/Tesla-5000-BTC-Giveaway-Airdrop-12-01

Archive: https://archive.is/SAHr6

[Chikito]

Fake coingecko.pro exchange

Code:

https://coingecko.pro/

IP Address: 104.27.144.172
Domain Name: COINGECKO.PRO
Registry Domain ID: D503300001190052418-LRMS
Registrar WHOIS Server: whois.namesilo.com
Registrar URL: http://www.namesilo.com
Updated Date: 2020-11-21T16:44:17Z
Creation Date: 2020-11-20T22:44:02Z
Registry Expiry Date: 2021-11-20T22:44:02Z
Registrar Registration Expiration Date:
Registrar: Namesilo, LLC
Registrar IANA ID: 1479
Registrar Abuse Contact Email: afilias-abuse@namesilo.com

Be careful guys, coingecko isn't exchange your Bitcoin.

[Chikito]

Fake Binance Airdrop

Code:

https://bindrop.co/

IP Address: 104.18.33.219
Domain Name: bindrop.co
Registry Domain ID: DFC813AE066C44C3FAA917965A22AB098-NSR
Registrar WHOIS Server: whois.publicdomainregistry.com
Registrar URL: publicdomainregistry.com
Updated Date: 2020-12-17T21:00:39Z
Creation Date: 2020-12-17T20:07:06Z
Registry Expiry Date: 2021-12-17T20:07:06Z
Registrar: PDR Ltd. d/b/a PublicDomainRegistry.com
Registrar IANA ID: 303
Registrar Abuse Contact Email: abuse@publicdomainregistry.com

be aware, binance never airdrop bitcoin, don't send your btc to a phishing website.

[Chikito]

Again, Fake/Phishing Uniswap

Code:

http://www.uniswap-support.uniswap-company.com
http://uniswap-support.com

IP Address: 207.174.213.52
Domain Name: UNISWAP-SUPPORT.COM
Registry Domain ID: 2580021293_DOMAIN_COM-VRSN
Registrar WHOIS Server: whois.registrar.eu
Registrar URL: http://www.openprovider.com
Updated Date: 2020-12-21T17:58:25Z
Creation Date: 2020-12-21T17:53:22Z
Registry Expiry Date: 2021-12-21T17:53:22Z
Registrar: Hosting Concepts B.V. d/b/a Registrar.eu
Registrar IANA ID: 1647
Registrar Abuse Contact Email: abuse@registrar.eu

Ip Relationship https://www.virustotal.com/gui/ip-address/207.174.213.52/relations

Date resolved
Domain
2020-12-22
uniswap-support.com
2020-12-22
cpcontacts.uniswap-support.com
2020-12-22
webmail.uniswap-support.com
2020-12-22
cpcalendars.uniswap-support.com
2020-12-22
www.uniswap-support.com
2020-12-22
uniswap-support.uniswap-company.com
2020-12-22
cpanel.uniswap-support.com
2020-12-22
mail.uniswap-support.com
2020-12-22
www.uniswap-support.uniswap-company.com
2020-12-22
autodiscover.uniswap-support.com
2020-12-22
webdisk.uniswap-support.com
2020-12-16
cpcontacts.uniswap-company.com
2020-12-16
webmail.uniswap-company.com
2020-12-16
webdisk.uniswap-company.com
2020-12-16
mail.uniswap-company.com
2020-12-16
autodiscover.uniswap-company.com
2020-12-16
www.uniswap-company.com
2020-12-16
cpcalendars.uniswap-company.com

Be careful as usual.

[Chikito]

Fake Mycelium wallet on Android

https://play.google.com/store/apps/details?id=com.mycelium.pro



be aware, already 500+ installed, I hope they aren't lost Bitcoin.

[Baofeng]

Another one of the Elon Musk fake giveaway:

Website:

Code:

https://epaymentbtc.tumblr.com/
https://epaymenteth.tumblr.com/
https://christmasbit.tumblr.com/

Archived: https://archive.is/1BM88

Criminals uses tumblr now, if someone will help me report, it will be taken down very quickly.

[Chikito]

Phishing Paxful Exchange

Code:

http://pioxul.com

IP Address: 162.0.215.125
Domain Name: PIOXUL.COM
Registry Domain ID: 2580599991_DOMAIN_COM-VRSN
Registrar WHOIS Server: whois.namecheap.com
Registrar URL: http://www.namecheap.com
Updated Date: 2020-12-24T12:28:37Z
Creation Date: 2020-12-24T12:28:27Z
Registry Expiry Date: 2021-12-24T12:28:27Z
Registrar: NameCheap, Inc.
Registrar IANA ID: 1068
Registrar Abuse Contact Email: abuse@namecheap.com

Be aware, don't use google searching. the correct website is paxful.com. please reporting also into https://safebrowsing.google.com/safebrowsing/report_phish/?hl=en and Namecheap domain.

[Baofeng]

Another of Elon Musk Fake Giveaway:

Code:

https://elon-crypto.fund/

Archived: https://archive.is/YD5vs

Whois Record for Elon-Crypto.fund
How does this work?
Domain Profile
Registrant    REDACTED FOR PRIVACY
Registrant Org    WhoisGuard, Inc.
Registrant Country    pa
Registrar    NameCheap, Inc.
IANA ID: 1068
URL: https://www.namecheap.com/
Whois Server: whois.namecheap.com

(p)
Registrar Status    clientTransferProhibited
Dates    33 days old
Created on 2020-11-29
Expires on 2021-11-29
Updated on 2020-12-04    
 
Name Servers    AGUSTIN.NS.CLOUDFLARE.COM (has 17,893,112 domains)
LAILA.NS.CLOUDFLARE.COM (has 17,893,112 domains)
   
 
Tech Contact    REDACTED FOR PRIVACY
REDACTED FOR PRIVACY,
REDACTED FOR PRIVACY, REDACTED FOR PRIVACY, REDACTED FOR PRIVACY, REDACTED FOR PRIVACY
(p) (f)
IP Address    104.27.146.61 - 482 other sites hosted on this server

[Chikito]

Fake and Phishing 1inch.cc

Code:

http://1inch.cc/

the related IP address: https://www.virustotal.com/gui/ip-address/103.253.140.164/relations

here all fake using IP address:

IP Address: 103.253.140.164
Domain Name: 1INCH.CC
Registry Domain ID: 153469856_DOMAIN_CC-VRSN
Registrar WHOIS Server: whois.namesilo.com
Registrar URL: http://www.namesilo.com
Updated Date: 2020-12-29T00:47:50Z
Creation Date: 2020-12-29T00:46:50Z
Registry Expiry Date: 2021-12-29T00:46:50Z
Registrar: NameSilo, LLC
Registrar IANA ID: 1479

Be careful everyone!.

[Chikito]

Fake Uniswap (uinswop)

Code:

https://app.uinswop.org/#/swap

IP Address: 47.91.72.87
created: 2019-01-07T10:48:20Z
last-modified: 2019-01-07T10:48:20Z
etname: NON-RIPE-NCC-MANAGED-ADDRESS-BLOCK
descr: IPv4 address block not managed by the RIPE NCC

Be careful, don't searching uniswap on google box.

[Baofeng]

Ah, the scammers are still having Elon face on their mouth, hehehe

Code:

https://elon-free.fund/

Archive: https://archive.is/V2Wko

Whois Record for Elon-Free.fund
How does this work?
Domain Profile
IP Address    172.64.80.222 - 8 other sites hosted on this server
   
  
IP Location    United States Of America - California - San Francisco - Cloudflare Inc.
ASN    United States Of America AS13335 CLOUDFLARENET, US (registered Jul 14, 2010)
IP History    1 change on 1 unique IP addresses over 0 years    
  
Hosting History    1 change on 2 unique name servers over 0 year

[Chikito]

Fake walletconnect.org

Code:

www.wallétconnect.org/
Wallelconnect.org

when you click Metamask wallet, will direct you to insert a private key and mnemonic phrase into a website where this will trap you to lose your balance.

IP Address: 198.54.115.177
Domain Name: WALLELCONNECT.ORG
Registry Domain ID: D402200000015707341-LROR
Registrar WHOIS Server: whois.namecheap.com
Registrar URL: http://www.namecheap.com
Updated Date: 2021-01-13T19:40:02Z
Creation Date: 2021-01-13T19:39:48Z
Registry Expiry Date: 2022-01-13T19:39:48Z
Registrar Registration Expiration Date:
Registrar: NameCheap, Inc.

Please help me to report this fake into https://safebrowsing.google.com/safebrowsing/report_phish/?hl=en and also the namecheap company.

[Baofeng]

Added one of the list:

Code:

https://givemusk.space/

Archived: https://archive.is/NJgIH

Whois Record for GiveMusk.space

Registrant Country    ua
Registrar    PDR Ltd. d/b/a PublicDomainRegistry.com
IANA ID: 303
URL: https://publicdomainregistry.com
Whois Server: whois.PublicDomainRegistry.com

(p)
Registrar Status    addPeriod, clientTransferProhibited, serverTransferProhibited
Dates    4 days old
Created on 2021-01-14
Expires on 2022-01-14
Updated on 2021-01-14    
 
Name Servers    IGOR.NS.CLOUDFLARE.COM (has 17,823,023 domains)
NOVA.NS.CLOUDFLARE.COM (has 17,823,023 domains)
   
 
Tech Contact    —
IP Address    172.67.194.18 - 4 other sites hosted on this server

[$crypto$]

List of Fake Giveaways added.

Surprisingly I was added to the fake giveaway group and there were lots of people getting it. I'm sure it was a bot that the owner had planned.

Keep careful guys because various scamers have now been done.

Website:

Code:

https://uni2021.com/

Archived: https://archive.is/iC7jG

Domain Name: UNI2021.COM
Registry Domain ID: 2581870611_DOMAIN_COM-VRSN
Registrar WHOIS Server: whois.tucows.com
Registrar URL: http://tucowsdomains.com
Updated Date: 2020-12-31T18:37:10
Creation Date: 2020-12-31T18:22:43
Registrar Registration Expiration Date: 2021-12-31T18:22:43
Registrar: TUCOWS, INC.
Registrar IANA ID: 69

[Baofeng]

Gemini fake 5000 BTC Giveaway

Code:

https://airdrop-gemini.blogspot.com/

Archived: https://archive.is/hQZwM

They are using blogspot platform to create this fake giveaway, so be very careful.

[Chikito]

Fake Exodus wallet

Code:

https://exodus-wallet.net

IP Address: 5.252.177.28
Domain Name: EXODUS-WALLET.NET
Registry Domain ID: 2586397948_DOMAIN_NET-VRSN
Registrar WHOIS Server: whois.PublicDomainRegistry.com
Registrar URL: http://www.publicdomainregistry.com
Updated Date: 2021-01-22T16:29:33Z
Creation Date: 2021-01-22T15:50:27Z
Registry Expiry Date: 2022-01-22T15:50:27Z
Registrar: PDR Ltd. d/b/a PublicDomainRegistry.com
Registrar IANA ID: 303

be careful, I fund this on google searching. Don't search exodus on the search box, always put the exact URL into the box https://www.exodus.io/

[Chikito]

Be Aware Phishing Bestchange (bestchainge.club)

Code:

https://bestchainge.club/

IP Address: 8.208.95.37
Domain Name: bestchainge.club
Registry Domain ID: D02C5C92724764F4BB77C25B75041590D-NSR
Registrar WHOIS Server: whois.namecheap.com
Registrar URL: http://www.namecheap.com
Updated Date: 2021-01-24T20:19:12Z
Creation Date: 2021-01-24T20:17:58Z
Registry Expiry Date: 2022-01-24T20:17:58Z
Registrar: NameCheap, Inc.
Registrar IANA ID: 1068
Registrar Abuse Contact Email: abuse@namecheap.com
Registrar Abuse Contact Phone: +1.6613102107

the IP relationship; https://www.virustotal.com/gui/ip-address/8.208.95.37/relations



be careful, always double-check the website url before actions.

[Chikito]

Scam/Phishing validatewebwallets.online

Code:

https://validatewebwallets.online/

The website is a collective scam wallet where the user must put the mnemonic seed

IP Address: 198.54.115.144
Domain Name: VALIDATEWEBWALLETS.ONLINE
Registry Domain ID: D219626518-CNIC
Registrar WHOIS Server: whois.namecheap.com
Registrar URL: https://namecheap.com
Updated Date: 2021-01-29T18:56:17.0Z
Creation Date: 2021-01-29T18:56:02.0Z
Registry Expiry Date: 2022-01-29T23:59:59.0Z
Registrar: Namecheap
Registrar IANA ID: 1068

Don't get in a trap.

[$crypto$]

Fake Giveaway Elon Musk

Again, fake Twitter with the name Elon Musk is familiar to me to find something like this, it will still be if the domain is new then I need to publish it here so that many people know and understand that this is a real scam.

Website:

Code:

https://twitterspacex.com/
https://getspacexdrop.com/

Archive

[Chikito]

Phishing 1lnch.com and eosuniswap.org

Code:

http://eosuniswap.org/

IP Address: 80.78.22.45
Domain Name: EOSUNISWAP.ORG
Registry Domain ID: D402200000015649763-LROR
Registrar WHOIS Server: whois.tucows.com
Registrar URL: http://www.tucows.com
Updated Date: 2021-01-29T17:59:10Z
Creation Date: 2021-01-07T13:52:43Z
Registry Expiry Date: 2022-01-07T13:52:43Z
Registrar Registration Expiration Date:
Registrar: Tucows Inc.
Registrar IANA ID: 69
Registrar Abuse Contact Email: domainabuse@tucows.com

Code:

https://1lnch.com

IP Address: 185.178.208.154
Domain Name: 1LNCH.COM
Registry Domain ID: 2585842188_DOMAIN_COM-VRSN
Registrar WHOIS Server: whois.namecheap.com
Registrar URL: http://www.namecheap.com
Updated Date: 2021-01-21T18:09:35Z
Creation Date: 2021-01-19T19:54:12Z
Registry Expiry Date: 2022-01-19T19:54:12Z
Registrar: NameCheap, Inc.
Registrar IANA ID: 1068
Registrar Abuse Contact Email: abuse@namecheap.com

Again, don't searching in the google searching box, both are appear in there. don't get in a trap by typing mnemonic seed into a phishing website.

[Baofeng]

There favourite fake of Crypto scam, Elon Musk:

Code:

https://elon-bonus.org/

Archive: https://archive.is/xYkzi

Registrar    NameCheap, Inc.
IANA ID: 1068
URL: http://www.namecheap.com
Whois Server: whois.namecheap.com

(p)
Registrar Status    addPeriod, serverTransferProhibited
Dates    4 days old
Created on 2021-01-30
Expires on 2022-01-30
Updated on 2021-01-30    
 
Name Servers    DNS1.NAMECHEAPHOSTING.COM (has 1,025,457 domains)
DNS2.NAMECHEAPHOSTING.COM (has 1,025,457 domains)
   
 
Tech Contact    —
IP Address    198.54.120.190 - 101 other sites hosted on this server

[Chikito]

Phishing walletsconnect.org

Code:

http://walletsconnect.org

IP Address: 169.255.59.11

Domain Name: WALLETSCONNECT.ORG
Registry Domain ID: D402200000015870070-LROR
Registrar WHOIS Server: whois.web4africa.net
Registrar URL: https://www.web4africa.net
Updated Date: 2021-01-31T01:29:14Z
Creation Date: 2021-01-31T01:29:13Z
Registry Expiry Date: 2022-01-31T01:29:13Z
Registrar Registration Expiration Date:
Registrar: Web4Africa Inc.
Registrar IANA ID: 664
Registrar Abuse Contact Email: abuse@web4africa.ne

A website needs your mnemonic seed. just write it carefully if you want to be lost at all

[Baofeng]

another of these fake UNI giveaways. Stay away, there's no more airdrop or UNI giveaways

Website:

Code:

 https://uni2021.org/
https://2021uni.org/

archived: https://archive.is/q0vxN

Registrar    Tucows Inc.
IANA ID: 69
URL: http://www.tucows.com
Whois Server: whois.tucows.com

(p)
Registrar Status    clientTransferProhibited, clientUpdateProhibited, serverTransferProhibited
Dates    19 days old
Created on 2021-01-23
Expires on 2022-01-23
Updated on 2021-01-23    
  
Name Servers    NS101.CLOUDNS.NET (has 206,922 domains)
NS102.CLOUDNS.NET (has 206,922 domains)
NS103.CLOUDNS.NET (has 206,922 domains)
NS104.CLOUDNS.NET (has 206,922 domains)
   
  
Tech Contact    —
IP Address    185.178.208.165 - 68 other sites hosted on this server

[Baofeng]

Interesting to see a .ir (Iran) ccTLD now. Seems that Elon Musk face is all over the world now specially with his company and the recent news of the $1.5 billion crypto investment.

Website:

Code:

https://dropmuskx.ir/

Dates    Expires on 2022-01-25
Updated on 2021-01-27    
 
Name Servers    COREY.NS.CLOUDFLARE.COM (has 17,663,523 domains)
LUCIANA.NS.CLOUDFLARE.COM (has 17,663,523 domains)
   
 
Tech Contact    —
IP Address    104.21.73.63 - 423 other sites hosted on this server

[CryptoYar]

This is another fake giveaway website. But this time the dogecoin has also been included for their dirty scam.

What happened:: Fake Giveaways.

Website Link:

Code:

https://musk.help/btc
https://musk.help/eth
https://musk.help/doge

Archive Link: https://archive.vn/0NMUT

1 days old
Created on 2021-02-15
Expires on 2022-02-15
Updated on 2021-02-15

https://whois.domaintools.com/musk.help

[Baofeng]

Another one of the fake Elon Musk giveaway:

Code:

https://elon-musk.life/

Archived: https://archive.is/GQdVi

Dates    4 days old
Created on 2021-02-14
Expires on 2022-02-14
Updated on 2021-02-14    
 
Name Servers    COCO.NS.CLOUDFLARE.COM (has 17,646,005 domains)
FELIPE.NS.CLOUDFLARE.COM (has 17,646,005 domains)
   
 
Tech Contact    REDACTED FOR PRIVACY (DT)
REDACTED FOR PRIVACY
REDACTED FOR PRIVACY (DT),
REDACTED FOR PRIVACY (DT), REDACTED FOR PRIVACY, REDACTED FOR PRIVACY (DT), REDACTED FOR PRIVACY
(p) (f)
IP Address    172.67.207.146 - 6 other sites hosted on this server

[Baofeng]

Zilliq coin fake giveaway:

Code:

http://zilmerits.com/

Archive: https://archive.is/kTrKs

Registrar    OwnRegistrar, Inc.
IANA ID: 1250
URL: http://www.ownregistrar.com
Whois Server: whois.ownregistrar.com

(p)
Registrar Status    clientTransferProhibited, ok
Dates    2 days old
Created on 2021-02-18
Expires on 2022-02-18
Updated on 2021-02-18    
 
Name Servers    NSA.WHOGOHOST.COM (has 63,013 domains)
NSB.WHOGOHOST.COM (has 63,013 domains)
   
 
Tech Contact    REDACTED FOR PRIVACY (DT)
WhoisSecure
18 San Carlos Street,
Los Angeles, California, 94110, us

(p)
IP Address    198.12.126.210 - 201 other sites hosted on this server

[Baofeng]

Scammers won' stop with the Tesla and Elon Musk fake giveaways:

Code:

https://elontesla.me/

Archived: https://archive.is/rRjhu

Dates    2 days old
Created on 2021-02-22
Expires on 2022-02-22
Updated on 2021-02-22    
  
Name Servers    ALBERT.NS.CLOUDFLARE.COM (has 17,670,101 domains)
DESI.NS.CLOUDFLARE.COM (has 17,670,101 domains)
   
  
Tech Contact    —
IP Address    104.21.82.154 - 428 other sites hosted on this server

[Chikito]

Fake Ads Bitcoin.org (bitciioin.org)

NAMECHEAP INC
Whois Serverwhois.namecheap.com
Referral URLhttp://www.namecheap.com
StatusaddPeriod https://icann.org/epp#addPeriod
serverTransferProhibited https://icann.org/epp#serverTransferProhibited
Important Dates
Expires On ; 2022-02-05
Registered On ; 2021-02-05

scammer use fake ads bitcoin.org to get a new user to download the wallet from the phishing, be a careful noob.

[Baofeng]

Fake Elon Musk 5,000 BTC & 100,000 ETH & 100,000,000 DOGE Airdrop

Website:

Code:

https://muskteam.ml/?i=1

Archived: https://archive.is/D4g4U

Whois not available when I post this.

[CryptoYar]

Another BNB fake giveaway

Website:

Code:

https://bnbbinance.com/

Archived: https://web.archive.org/web/20210301042039/https://bnbbinance.com/

Domain name: bnbbinance.com
Registry Domain ID: 2593376216_DOMAIN_COM-VRSN
Registrar WHOIS Server: whois.namecheap.com
Registrar URL: http://www.namecheap.com
Updated Date: 0001-01-01T00:00:00.00Z
Creation Date: 2021-02-23T09:30:45.00Z
Registrar Registration Expiration Date: 2022-02-23T09:30:45.00Z
Registrar: NAMECHEAP INC

who is data

[Baofeng]

Another of this Elon Musk 5,000 BTC & 100,000 ETH & 100,000,000 DOGE Airdrop

Code:

http://musk-ch.com/

Archived: https://archive.is/gxFWc

Registrar    Epik Holdings Inc Epik Inc.
IANA ID: 617
URL: http://www.epik.com
Whois Server: whois.epik.com

(p)
Registrar Status    clientTransferProhibited
Dates    4 days old
Created on 2021-02-27
Expires on 2022-02-27
Updated on 2021-02-27    
 
Name Servers    NS1.20MB.NL (has 96 domains)
NS2.20MB.NL (has 96 domains)
   
 
Tech Contact    Privacy Administrator
Anonymize, Inc.
1100 Bellevue Way NE, Ste 8A-601,
Bellevue, WA, 98004, us

(p)
IP Address    185.239.243.112 - 75 other sites hosted on this server

[Baofeng]

More of Elon Musk fake giveaways:

Code:

https://musk-e-giveaway.live/
https://elon-m-giveaway.live/
https://musk-elon-giveaway.me/
https://tesla3.team/
https://tesla3.space/
https://musk-airdrop.org/

[Chikito]

Fake aave give away

Code:

https://aave.fund/

the user must send aave first to fake doubled balance.

scammer address still 0; https://etherscan.io/address/0x949D0054aD1f5aBc69EA8bFd0436132a11A4ab34 even the website proof has a lot of fake transaction.

IP Address: 186.2.161.142
Domain Name: aave.fund
Registry Domain ID: ee84de63484045f181f1277a5fe7ffc0-DONUTS
Registrar WHOIS Server: whois.tucows.com
Registrar URL: http://www.tucows.com
Updated Date: 2021-03-10T16:48:57Z
Creation Date: 2021-03-10T16:48:55Z
Registry Expiry Date: 2022-03-10T16:48:55Z
Registrar: Tucows Domains Inc.
Registrar IANA ID: 69
Registrar Abuse Contact Email: domainabuse@tucows.com
Registrar Abuse Contact Phone: 416.535.0123x1283

That IP's address has Flagged as Malicious by many anti-virus providers: https://www.virustotal.com/gui/ip-address/186.2.161.142/detection

just be careful.
 

[Chikito]

Fake Myetherwallet and Uniswap.

Code:

https://www.myetherwallet.love

Code:

https://app.uniswap.sg

Domain Name: MYETHERWALLET.LOVE
Registry Domain ID: D225757403-CNIC
Registrar WHOIS Server: whois.west.cn
Registrar URL: http://www.west.cn
Updated Date: 2021-03-13T11:16:12.0Z
Creation Date: 2021-03-13T11:05:48.0Z
Registry Expiry Date: 2022-03-13T23:59:59.0Z

IP Address: 162.213.251.198
Domain Name: app.uniswap.sg

IP Relationship > https://www.virustotal.com/gui/ip-address/162.213.251.198/relations



The IP's Connected a lot of phishing, be aware, the scammer will continue using the same server to create one.

[Baofeng]

Another Elon Musk fake giveaway:

Code:

teslab.us
https://elonmusk-gives.s3.amazonaws.com/index.html

archive: https://archive.is/6CZJP

Dates    2 days old
Created on 2021-03-12
Expires on 2022-03-12
Updated on 2021-03-12    
  
Name Servers    NS1.DNSOWL.COM (has 1,553,479 domains)
NS2.DNSOWL.COM (has 1,553,479 domains)
NS3.DNSOWL.COM (has 1,553,479 domains)
   
  
Tech Contact    REDACTED FOR PRIVACY (DT)
REDACTED FOR PRIVACY (DT),
REDACTED FOR PRIVACY (DT), CA, REDACTED FOR PRIVACY (DT), us
(p)
IP Address    107.161.23.204 - 159 other sites hosted on this server

[$crypto$]

I found a phishing site with the name Trezor again. I think it's not only that there will definitely be more wallet phishing sites that want to drain your wallet, so I think we need as much as possible to catch it.

Web Phishing Trezor

Code:

https://xn--trezr-xob.com/

6 days old
Created on 2021-03-09
Expires on 2022-03-09
Updated on 0000-12-31

[Chikito]

Scam walletinterlink.com

Code:

https://walletinterlink.com/

Code:

https://walletinterlink.com/wallet/

the user must write 12/24 mnemonic seed to connect the hardware/software wallet.

.

IP Address: 68.65.122.141
Domain Name: WALLETINTERLINK.COM
Registry Domain ID: 2599482937_DOMAIN_COM-VRSN
Registrar WHOIS Server: whois.namecheap.com
Registrar URL: http://www.namecheap.com
Updated Date: 2021-03-21T17:10:07Z
Creation Date: 2021-03-21T17:09:44Z

.

[Baofeng]

Time to update another Elon Musk fake giveway:

Code:

https://teslatw.org/

Archive: https://archive.is/d40mm

Registrar    NameCheap, Inc.
IANA ID: 1068
URL: http://www.namecheap.com
Whois Server: whois.namecheap.com

(p)
Registrar Status    addPeriod, serverTransferProhibited
Dates    2 days old
Created on 2021-03-31
Expires on 2022-03-31
Updated on 2021-03-31    
  
Name Servers    LARS.NS.CLOUDFLARE.COM (has 18,240,762 domains)
MAGDALENA.NS.CLOUDFLARE.COM (has 18,240,762 domains)
   
  
Tech Contact    —
IP Address    172.67.192.94 - 6 other sites hosted on this server

[Chikito]

Another Fake Electrum Wallet

Code:

https://electrum-i.com/

That's IP's had a lot of relation of fake wallet; https://www.virustotal.com/gui/ip-address/47.91.72.40/relations

Code:

jaxx-w.com
exodus-i.com
electrum-i.com
myetherwalletj.net
myetherwalletl.com
blockchain-i.at
colnbose.com
myeteherwalete.com
myeterwallet.at

Who is IP/domain;

Domain Name: electrum-i.com
IP Address: 47.91.72.40
Domain Name: ELECTRUM-I.COM
Registry Domain ID: 2602721319_DOMAIN_COM-VRSN
Registrar WHOIS Server: whois.webnic.cc
Registrar URL: http://www.webnic.cc
Updated Date: 2021-04-04T19:30:30Z
Creation Date: 2021-04-04T09:33:05Z
Registry Expiry Date: 2022-04-04T09:33:05Z
Registrar: Web Commerce Communications Limited dba WebNic.cc
Registrar IANA ID: 460

Be careful to double-check and verify the download.

[Baofeng]

Another fake Elon Musk giveaway

Code:

https://embitcoins.org/

Archived: https://archive.is/Jy5Jq

Registrant Org    Privacy service provided by Withheld for Privacy ehf
Registrant Country    is
Registrar    NameCheap, Inc.
IANA ID: 1068
URL: http://www.namecheap.com
Whois Server: whois.namecheap.com

(p)
Registrar Status    serverTransferProhibited
Dates    9 days old
Created on 2021-03-30
Expires on 2022-03-30
Updated on 2021-03-30    
 
Name Servers    DNS1.NAMECHEAPHOSTING.COM (has 1,067,851 domains)
DNS2.NAMECHEAPHOSTING.COM (has 1,067,851 domains)
   
 
Tech Contact    —
IP Address    198.187.31.229 - 544 other sites hosted on this server

[Super Bitard]

How do you have to be a fool to fall for this link? Not a bit like the official link

[$crypto$]

FAKE Trezor Wallert

Code:

https://wallet.xn--trer-dbb4416b.com/

Archived: https://archive.is/wip/ofumJ



The more phishing like this, I think the things scammers can do on this site, the most important thing for many people is to make them aware of this, especially beginners.

The Trezor and Nano Ledger hardware wallets are typically targeted by scammers with phishing sites.

[Chikito]

How do you have to be a fool to fall for this link? Not a bit like the official link

people with carelessness and who don't care to double-check the website will fall into this trap. people who engage in google searching would be the scammer target also. people who always perform the advice will be safe.

[Chikito]

Phishing Myetherwallet

Code:

https://myeteherewalete.com/

the website will ask the user to input mnemonic phrase or Ethereum private key.

website created on 17 April 2021.

Domain Name: MYETEHEREWALETE.COM
Registry Domain ID: 2605814689_DOMAIN_COM-VRSN
Registrar WHOIS Server: whois.namesilo.com
Registrar URL: http://www.namesilo.com
Updated Date: 2021-04-17T18:12:20Z
Creation Date: 2021-04-17T18:12:19Z
Registry Expiry Date: 2022-04-17T18:12:19Z
Registrar: NameSilo, LLC
Registrar IANA ID: 1479

Be careful to do not to get into the trap.

[Baofeng]

Fake and phishing site of https://foundation.app/, an NFT marketplace

Code:

https://foundatlon.app/

Registrant    REDACTED FOR PRIVACY
Registrant Org    Privacy service provided by Withheld for Privacy ehf
Registrant Country    is
Registrar    Namecheap Inc.
IANA ID: 1068
URL: https://www.namecheap.com/
Whois Server: whois.namecheap.com

(p)
Registrar Status    addPeriod, clientTransferProhibited
Dates    1 days old
Created on 2021-04-21
Expires on 2022-04-21
Updated on 2021-04-21

[Chikito]

Phishing Exodus Wallet

Code:

https://exocdus.com

IP Address: 185.178.208.156
Domain Name: EXOCDUS.COM
Registry Domain ID: 2579208200_DOMAIN_COM-VRSN
Registrar WHOIS Server: whois.reg.com
Registrar URL: http://www.reg.ru

the website will ask you to write your secret backup code, don't trap it.

[CryptoYar]

What happened: Riskmoon coin Fake giveaway

Website Link:

Code:

http://riskmoongiveaway.com/

Archive Link: https://archive.vn/K5Lwm



No domain information available

IP Address: 185.244.36.172
Domain Name: RISKMOONGIVEAWAY.COM
Registry Domain ID: 2607346419_DOMAIN_COM-VRSN
Registrar WHOIS Server: whois.namecheap.com
Registrar URL: http://www.namecheap.com
Updated Date: 2021-04-24T10:34:36Z
Creation Date: 2021-04-24T10:33:35Z
Registry Expiry Date: 2022-04-24T10:33:35Z
Registrar: NameCheap, Inc.
Registrar IANA ID: 1068
Registrar Abuse Contact Email: abuse@namecheap.com

[Chikito]

No domain information available

you can check using IP/domain tools such as https://ipinfo.info/html/ip_checker.php

Code:

http://riskmoongiveaway.com

IP Address: 185.244.36.172
Domain Name: RISKMOONGIVEAWAY.COM
Registry Domain ID: 2607346419_DOMAIN_COM-VRSN
Registrar WHOIS Server: whois.namecheap.com
Registrar URL: http://www.namecheap.com
Updated Date: 2021-04-24T10:34:36Z
Creation Date: 2021-04-24T10:33:35Z
Registry Expiry Date: 2022-04-24T10:33:35Z
Registrar: NameCheap, Inc.
Registrar IANA ID: 1068
Registrar Abuse Contact Email: abuse@namecheap.com

that domain was created just 3 days ago. look that scam purpose only.

you have also checked the relationship IP using virustotal tools: https://www.virustotal.com/gui/ip-address/185.244.36.172/relations

then you will find that IP only creates for scams purpose.

Code:

www.moonboysgiveaway.safemoonreward.net
www.hoglgiveaway.finance
...
etc

[CryptoYar]

No domain information available

you can check using IP/domain tools such as https://ipinfo.info/html/ip_checker.php

I was trying to get the domain name information through domaintools.com but maybe there was some issue in this tool, that's why I was failed to get domain info. However, it is working perfectly right now.

you have also checked the relationship IP using virustotal tools: https://www.virustotal.com/gui/ip-address/185.244.36.172/relations

Nice I will try. Thank you

[Chikito]

Fake Chipmixer.co.uk (chipmixkd2wgbqoy.onion)

Code:

https://chipmixer.co.uk/

Code:

chipmixkd2wgbqoy.onion

Domain Name: chipmixer.co.uk
IP Address: 104.21.38.201

https://www.virustotal.com/gui/ip-address/104.21.38.201/relations



No onion link available when putting that site into the TOR browser.

the real chipmixer will provide an onion link as the picture below,

[$crypto$]

FAKE Giveaway QTUM

Website

Code:

https://www.qtum.claims/block.html

Archived: https://archive.is/d4hp9

11 days old
Created on 2021-04-21
Expires on 2022-04-21
Updated on 2021-04-26

https://whois.domaintools.com/qtum.claims






There is a lot of rubbish giveaway like this, I think you have to be careful whoever offers it on the telegram line should avoid it.

Real Website: https://qtum.org/en

[ChipMixer]

the real chipmixer will provide an onion link as the picture below,

If website provides onion link (as pictured) - it still may not be real website.
If unsure - check ChipMixer ANN thread: https://bitcointalk.org/index.php?topic=1935098

[CryptoYar]

What happened: Another Riskmoon Fake Giveaway

Website Link:

Code:

http://riskmoon-giveaway.net/

Archive Link: https://archive.vn/KBKfA



Scammer wallet: https://bscscan.com/address/0x3222467cdC2Ef5799D992443869Ef6F547D0C7e3

Domain name info

Registrar Status   clientTransferProhibited, ok
Dates   2 days old
Created on 2021-05-02
Expires on 2022-05-02
Updated on 2021-05-02

https://whois.domaintools.com/riskmoon-giveaway.net

[$crypto$]

Fake Trustpad (TPAD) FLASH Token-Sale is LIVE

Website Fake:

Code:

https://trustpad-sale.com/

Archived: https://archive.is/VnLUg

4 days old
Created on 2021-05-01
Expires on 2022-05-01
Updated on 2021-05-01

https://whois.domaintools.com/trustpad-sale.com



Trustpad will officially announce the white list in public sale and it will be announced in the medium.
So what is listed above is clearly a scam they are continuing to take advantage of the project situation which is going on a public sale so do not send ETH or USDT / USDC / TUSD in the wallet below.

Address Scammers

Code:

0x66987428309B05391270FD101f96083086D0d725

TrustPad Official Group: https://t.me/TrustPad

TrustPad FAKE: https://t.me/tpaadsale

[CryptoYar]

Another fake giveaway by the same group of scammers.

Website:

Code:

http://riskmoon-giveaway.com/

https://archive.vn/Lnnvo

scammers wallet: 0x3222467cdC2Ef5799D992443869Ef6F547D0C7e3 ( previously used in riskmoon-giveaway.net)

Domain:
Registrar Status   clientTransferProhibited
Dates   1 days old
Created on 2021-05-04
Expires on 2022-05-04
Updated on 2021-05-04
whois info source

[Chikito]

Another fake giveaway by the same group of scammers.

Website:

Code:

http://riskmoon-giveaway.com/

It's the same relationship IP address as your post above

That IP has been flagged. when I look at the relationship > https://www.virustotal.com/gui/ip-address/185.244.36.172/relations
I find another giveaway such:  holg-giveaway.

Code:

holg-giveway.com

4 days old
Created on 2021-05-01
Expires on 2022-05-01
Updated on 2021-05-01

https://whois.domaintools.com/trustpad-sale.com

That IP also related on this site, which providing high return investment (possible scam).

Code:

https://247smartnet.online/

the real chipmixer will provide an onion link as the picture below,

If website provides onion link (as pictured) - it still may not be real website.
If unsure - check ChipMixer ANN thread: https://bitcointalk.org/index.php?topic=1935098

Thanks to point that. I had already also reported the .onion link at the past. seems all those already baned.

[$crypto$]

Wilder World Fake Public Sale

Website:

Code:

1. https://wilderworld.polkastarter.com.es/Sale.html#
2. https://wilderworld-sale.com/

% NOTE: The registry for this domain name does not publish ownership
%       records (whois records) in the standard format.  This data
%       represents the most likely status of the domain based on
%       information provided by the Internet's domain name servers (DNS).

domain: polkastarter.com.es
status: taken
nameserver: ns1.dns-parking.com
nameserver: ns2.dns-parking.com

% For more information, please visit http://www.nic.es/

Scammers Address: 0xA397076BA3464E6Fb5fde4cBF996fE5492680726



Scammers Address: 0xFD43FDb66e121fc6A587eD6FF9E3AbCC48c79564

All Wilder World Public sales are bogus and their official ones start on May 11th

🚨 Our Initial DEX Offering is just around the corner. May 11th is the day we launch Wilder World on Polkastarter! 🎉

Real Website: https://www.wilderworld.com/


Polkastarter Fake

Website:

Code:

http://polkastarter.com.es/

Fake:


Real:

[$crypto$]

FAKE Giveaway 1 000 000 ETH

Website:

Code:

https://eth-ceo.org/

Archived: https://archive.is/PdVme

1 days old
Created on 2021-05-07
Expires on 2022-05-07
Updated on 2021-05-07

Scammers wallet

Code:

0x95f0badc4e2db83fa4327f057e1a06ad2e6c867c

Be careful with this fake giveaway because it is promoted on popular channels that have a lot of followers so it's better to avoid it and leave telegrams that promote this fake.

Fortunately, I saw that no one had deposited it in the wallet yet.

[Baofeng]

The never ending Elon Musk fake bitcoin giveaways:

Code:

http://snlmusk.com/

Dates    2 days old
Created on 2021-05-06
Expires on 2022-05-06
Updated on 2021-05-06    
 
Name Servers    DELL.NS.CLOUDFLARE.COM (has 19,076,155 domains)
ED.NS.CLOUDFLARE.COM (has 19,076,155 domains)
   
 
Tech Contact    REDACTED FOR PRIVACY (DT)
REDACTED FOR PRIVACY (DT),
REDACTED FOR PRIVACY (DT), California, REDACTED FOR PRIVACY (DT), us
(p)
IP Address    178.175.148.167 is hosted on a dedicated server

[Chikito]

Phishing uniswap-meta Wallet

Code:

http://uniswap-meta.org

IP Address: 45.141.159.64
Domain Name: UNISWAP-META.ORG
Registry Domain ID: D402200000016532905-LROR
Registrar WHOIS Server: whois.registrar.eu
Registrar URL: http://www.openprovider.com
Updated Date: 2021-04-28T13:47:55Z
Creation Date: 2021-04-14T06:14:00Z
Registry Expiry Date: 2022-04-14T06:14:00Z
Registrar Registration Expiration Date:
Registrar: Hosting Concepts B.V. d/b/a Registrar.eu

the relationship IP > https://www.virustotal.com/gui/ip-address/45.141.159.64/relations

The scammer still using the same server (IP address) to create another phishing. better to report that IP than domain.



I still to warning people to do not to write your detail (mnemonic seed) into phishing or another website.

[$crypto$]

FAKE Public Sale Polkarare and QoinIQ

Website:

Code:

https://prare-sale.com/
https://qoiniq-sale.com/

Archived: 1 - 2

Created on 2021-05-09
Expires on 2022-05-09
Updated on 2021-05-09

2 days old
Created on 2021-05-07
Expires on 2022-05-07
Updated on 2021-05-07

Scammers wallet

Code:

0xc1f258f090a080097041f0b6BC4DDd510339725F

QoinIQ IEO Start 17 may on Probit
Polkarare IEO Start 10 May on Gate.io

Now that more IDO will be cloned in their fake sales I see the scammers wallets look the same and are controlled by a group of people.
Be careful.

[$crypto$]

FAKE Public Sale Solanium

Website:

Code:

https://solanium-sale.com/

Scammers wallet

Code:

0xc1f258f090a080097041f0b6BC4DDd510339725F

Solanium has not made a public sale yet and is currently on a whitelist so you should look closely that solanium has not announced a public sale yet.

It must be differentiated and don't let the case come back because I see in the contents of the scamers wallet there are many assets in it and I am sure that it is the money they make with the fake sale.


Fake Public Sale Wilder World

Webiste:

Code:

https://polkastarter.ltd/WilderWorld

Tokens (WILD) have been traded, you can see here https://www.coingecko.com/en/coins/wilder-world#markets

[Baofeng]

Another of the Polka fake site

Code:

https://polkastarter.art/

Archived: https://archive.is/cFS9p

Dates    1 days old
Created on 2021-05-11
Expires on 2022-05-11
Updated on 2021-05-11    
 
Name Servers    DNS1.NAMECHEAPHOSTING.COM (has 1,083,830 domains)
DNS2.NAMECHEAPHOSTING.COM (has 1,083,830 domains)
   
 
Tech Contact    —
IP Address    66.29.132.84 - 13 other sites hosted on this server

[$crypto$]

FAKE Giveaway Dogecoin

Website:

Code:

https://dogecoin.claims/

Archived: https://archive.is/iWRrk

6 days old
Created on 2021-05-08
Expires on 2022-05-08
Updated on 2021-05-13

https://whois.domaintools.com/dogecoin.claims



Scammers wallet

Code:

DHQSTXYAezWzZUci5ibnhk2G6t8rY21XCv

Before Ethereum and now Doge that appeared in a fake giveaway with the same appearance, there will definitely be more fake giveaway appearing.
I will continue to monitor and report it here.

[Chikito]

Phishing Walletconnection.org

Code:

https://walletsconection.org/

IP Address: 104.219.248.87
Domain Name: WALLETSCONECTION.ORG
Registry Domain ID: D402200000016757164-LROR
Registrar WHOIS Server: whois.namecheap.com
Registrar URL: http://www.namecheap.com
Updated Date: 2021-05-08T17:46:48Z
Creation Date: 2021-05-08T17:46:27Z
Registry Expiry Date: 2022-05-08T17:46:27Z
Registrar Registration Expiration Date:
Registrar: NameCheap, Inc.

Be careful do not to write the mnemonic seed into a phishing site.

The real website of walletconnect is https://walletconnect.org/ we don't need to write the mnemonic seed if use the real website

[Chikito]

Fake Give Away 1inch.gift

Code:

https://www.1inch.gift/

There is a fake doubling 1inch token.

more phishing found with the IP; https://www.virustotal.com/gui/ip-address/185.178.208.137/relations



Domain Information;

IP Address: 185.178.208.137
Domain Name: 1inch.gift
Registry Domain ID: DO_5b65b02f31c7b22fb5b613cd33a130c5-UR
Registrar WHOIS Server: whois.tucows.com
Registrar URL: www.tucowsdomains.com
Updated Date: 2021-05-21T17:01:09.944Z
Creation Date: 2021-05-21T16:55:16.111Z
Registry Expiry Date: 2022-05-21T16:55:16.111Z
Registrar: Tucows Domains Inc.
Registrar IANA ID: 69

Be careful don't get the trap.

[$crypto$]

Fake Giveaway Dogecoin

Website:

Code:

https://dogecoingive.org/

Archived: https://archive.is/wip/Mksd2

38 days old
Created on 2021-04-20
Expires on 2022-04-20
Updated on 2021-04-20

https://whois.domaintools.com/dogecoingive.org





More and more evil in the big multiplier when sending doges so be careful.
All ways are scammers, but it's all impossible.

Take care of your assets.

[Chikito]

I just found the link phishing chipmixer Clearnet and onion link on the review website

Code:

https://onion.best/chipmixer/

Code:

http://chipmixqiuseiw76.onion/
https://chippmixer.com/

I'm pretty sure all the link inside the review is fake https://onion.best/reviews/bitcoin-mixers/
So, if you please report that blog to the authority.


About Fake and Phishing chipmixer, I found A lot when searching it using DuckDuckGo and Ahmia machines.

Code:

https://chipmixerr.com/
https://chipmixerz.com/
https://chippmixer.com/
https://chipmixer.co.uk/
http://chipmixbvyyrylfmrwjdcdcxtxvrbmdyfpsm4456fnku2ajo2obva6yd.onion/
https://chipmixer.xyz/
https://chipmixerr.com/
http://chipmixer7vrgjzh.onion/

https://archive.is/gJ6VP
https://archive.is/sdn3s
https://archive.is/CGNoH
https://archive.is/DgmEo
https://archive.is/555lk
https://archive.is/gJ6VP
https://archive.is/hX2Ys
https://archive.is/Hq0Ha

Those all still active and some of them aren't new and were reported a few years ago.

[ChipMixer]

I just found the link phishing chipmixer Clearnet and onion link on the review website

Code:

https://onion.best/chipmixer/

I'm pretty sure all the link inside the review is fake

Code:

https://onion.best/reviews/bitcoin-mixers/

There is no need to give fake review website clickable link.

[Chikito]

I just found the link phishing chipmixer Clearnet and onion link on the review website

Code:

https://onion.best/chipmixer/

I'm pretty sure all the link inside the review is fake

Code:

https://onion.best/reviews/bitcoin-mixers/

There is no need to give fake review website clickable link.

thanks for reminding me,

*Link was edited

[$crypto$]

Trezor Phishing Site

Website:

Code:

https://xn--trezr-79a.io/

Archived: https://web.archive.org/web/20210607175149/https://xn--trezr-79a.io/

Domain Name: XN--TREZR-79A.IO
Registry Domain ID: D503300001198758855-LRMS
Registrar WHOIS Server: whois.namecheap.com
Registrar URL: www.namecheap.com
Updated Date: 2021-06-06T19:30:25Z
Creation Date: 2021-06-06T19:30:22Z
Registry Expiry Date: 2022-06-06T19:30:22Z
Registrar Registration Expiration Date:
Registrar: NameCheap, Inc
Registrar IANA ID: 1068

The problem of doing a search on Google still cannot be prevented from having ads on the first page, so if you are still in the habit of typing on Google, it is necessary to pay attention to which site is the official one.
It's better to visit the site by typing into the official site, I think this is easy to memorize.

[$crypto$]

Walletconnect Phishing Site:

Website:

Code:

https://wallets-sync.com/?v

Archived: https://web.archive.org/web/20210610123109/https://wallets-sync.com/?v

Domain name: wallets-sync.com
Registry Domain ID: 2614307331_DOMAIN_COM-VRSN
Registrar WHOIS Server: whois.namecheap.com
Registrar URL: http://www.namecheap.com
Updated Date: 0001-01-01T00:00:00.00Z
Creation Date: 2021-05-23T16:20:51.00Z
Registrar Registration Expiration Date: 2022-05-23T16:20:51.00Z
Registrar: NAMECHEAP INC
Registrar IANA ID: 1068

The original website will not display several other altcoin logos but this is just an engineering for those who don't know to enter the seed of the phrase, therefore avoid this kind of thing and be careful again in seeing the original URL.

I'm here showing the original Walletconnect site: https://walletconnect.org/

[$crypto$]

Fake Giveaway Safemooncash

Website:

Code:

https://safemooncash-giveaway.org/

Archived: https://web.archive.org/web/20210611152034/https://safemooncash-giveaway.org/

Domain Name: SAFEMOONCASH-GIVEAWAY.ORG
Registry Domain ID: D402200000017031766-LROR
Registrar WHOIS Server: whois.reg.com
Registrar URL: http://www.reg.com
Updated Date: 2021-06-09T15:17:26Z
Creation Date: 2021-06-09T15:12:22Z
Registry Expiry Date: 2022-06-09T15:12:22Z
Registrar Registration Expiration Date:
Registrar: Registrar of Domain Names REG.RU LLC
Registrar IANA ID: 1606

Safemooncash has never held a giveaway like this, and those who do this are certainly scammers who want to trap you, if someone of you asks about this then we need to say this is a scam under the guise of a safemooncash giveaway and be careful, if there is a slight loophole it can harm others.

Official site: https://safemooncash.org/

[Chikito]

Phishing pancakeswap.cheap

Code:

https://docs.pancakeswap.cheap/

IP Address: 62.210.177.59
Domain Name: docs.pancakeswap.cheap
Top Level Domain: CHEAP
Malformed request.
inetnum: 62.210.128.0 - 62.210.255.255
org: ORG-ONLI1-RIPE
netname: IE-POOL-BUSINESS-HOSTING
descr: IP Pool for Iliad-Entreprises Business Hosting Customers
country: FR
admin-c: IENT-RIPE
tech-c: IENT-RIPE
status: LIR-PARTITIONED PA
mnt-by: MNT-TISCALIFR-B2B
created: 2012-11-02T11:40:24Z
last-modified: 2016-02-22T16:26:23Z

This IP Relationship > https://www.virustotal.com/gui/ip-address/62.210.177.59/relations



Usually the scammer IP's always connected to another phishing site, like the post above.

[$crypto$]

Trezor Phishing Site: {Pay attention to the domain name again}

Website:

Code:

http://wwwtrezar.io/start/

Archived: https://archive.is/wip/slz35

Domain Name: WWWTREZAR.IO
Registry Domain ID: D503300001198700345-LRMS
Registrar WHOIS Server: whois.eranet.com
Registrar URL: http://www.eranet.com
Updated Date: 2021-06-04T19:12:13Z
Creation Date: 2021-06-04T19:02:01Z
Registry Expiry Date: 2022-06-04T19:02:01Z
Registrar Registration Expiration Date:
Registrar: Eranet International Limited
Registrar IANA ID: 1868

When we click on one of the images above, we will be directed to enter a 24-word phrase.



Well I hope you never follow the instructions from this phishing site if you don't want to lose your money.
Scams are constantly trying to trick you with new scripts you may not even be aware of.

[$crypto$]

Exodus Phishing Site

Website:

Code:

https://exocdus.ws

Archived: https://web.archive.org/web/20210616163628/https://exocdus.ws/

Domain Name: EXOCDUS.WS
Domain ID: 6D243EFB0DCBE2B0E050010AAC0133D7
WHOIS Server: whois.rrpproxy.net
Registrar URL: http://rrpproxy.com
Updated Date: 2021-06-02T11:59:36Z
Creation Date: 2021-06-02T11:59:36Z
Registrar Registration Expiration Date: 2022-06-02T11:59:36Z
Registrar: Key-Systems GmbH
Registrar IANA ID: 1345

Pay attention again to the domain carefully because now phishing sites are rife everywhere including inserting in social media and also google searches, therefore there is no need to type carelessly on google, just go with the original site and the correct URL, it is far safe.

Official site: https://www.exodus.com/

[Chikito]

Trezor Phishing Site: {Pay attention to the domain name again}

Exodus Phishing Site

Seems fake or phishing wallet will not decrease every day, the scammer uses the same trick and IP every creates a new domain. because I also find phishing atomic wallet again.

Code:

https://atomicwallet.dev/

https://archive.is/CfL7d

Domain Name: atomicwallet.dev
IP Address: 169.239.128.161
Registry Domain ID: 45E0B8631-DEV
Registrar WHOIS Server: whois.nic.google
Registrar URL: None
Updated Date: 2021-04-06T22:19:46Z
Creation Date: 2021-04-01T22:19:46Z
Registry Expiry Date: 2022-04-01T22:19:46Z
Registrar: NameSilo, LLC
Registrar IANA ID: 1479

just download and scanning wallet.exe using virus total;
https://www.virustotal.com/gui/file/20731b55bc3657f5fc65d94deb02182b63ec3ef4da8ac0a53eb7c553cd239d91/detection

[$crypto$]

Trezor Phishing Site: {Pay attention to the domain name again}

Exodus Phishing Site

Seems fake or phishing wallet will not decrease every day, the scammer uses the same trick and IP every creates a new domain. because I also find phishing atomic wallet again.

True, this is not a lie even almost every day keeps popping up wallets or phishing with new domains, I don't know how there is no prevention? I think it's useless to report the domain too because they will create a new one and the trick is the same.

The exodus phishing wallet is back with a new domain after I found it yesterday but it's still the same trick.

Website: exodus.cx
Archived: https://web.archive.org/web/20210617114319/https://exodus.cx/

Domain Name: exodus.cx
Registry Domain ID: 1881037-CoCCA
Registry WHOIS Server:: whois.coccaregistry.org
Updated Date: 2021-06-02T08:32:48.542Z
Creation Date: 2021-05-26T09:48:11.184Z
Registry Expiry Date: 2022-05-26T09:48:11.374Z
Registrar Registration Expiration Date: 2022-05-26T09:48:11.374Z
Registrar: CentralNic Ltd
Reseller: Paymall s.r.o.
Reseller Street Address: Opletalova 921/6, New Town
Reseller Other Address Info: Prague 1, 11000
Reseller Country: CZ (Registrar is GB )
Reseller Phone: +420.601523999
Reseller Fax: +420.775097485

[CryptoYar]

10,000,000 MATIC Fake Giveaway

Website link:

Code:

https://matic.gifts/info
https://matic.gifts/

Twitter:

Code:

 https://twitter.com/MATIC_BONUS

Scammer's wallet: https://polygonscan.com/address/0x97C0F0DD48Db9dd487D26108568a05F542cB230C

Dates   3 days old
Created on 2021-06-14
Expires on 2022-06-14
Updated on 2021-06-14

Whois

[CryptoYar]

50,000 ETH and  5000 BTC Fake Giveaway

Website link:

Code:

https://etherlive.org/ethgives
https://etherlive.org/btcgives

Scammer's wallets:

Code:

 
BTC: 17vmMJ2rtTiR8UnBj8WuhjhEe1MyyemEVx
ETH: 0xD96D23a1bafA5C544E3C0F2280feaD18453B6a8E

Dates   3 days old
Created on 2021-06-16
Expires on 2022-06-16
Updated on 2021-06-16

Whois

[$crypto$]

Fake Uniswap

Website:

Code:

https://xn--app-unswap-6sb.cc/

Archived: https://archive.is/wip/yiGKD

info whois
https://whois.domaintools.com/xn--app-unswap-6sb.cc



Uniswap
Pancakswap
1inch
Etc.
There will be more phishing sites they will continue to spread with the name of the famous and largest DEX exchange of course this will continue to be done by fraudsters to get more money.
I will continue to report in this thread and archive it.

Official site: https://app.uniswap.org/#/swap?lng=en-US

[Chikito]

Fake Investment with High return.

Code:

https://crypto-peak.net

And possible with fake-proof licenses also.



Whois Lookup

NetRange: 68.65.120.0 - 68.65.123.255
CIDR: 68.65.120.0/22
NetName: NCNET-7
NetHandle: NET-68-65-120-0-1
Parent: NET68 (NET-68-0-0-0-0)
NetType: Direct Allocation
OriginAS: AS16626, AS11855, AS174, AS4323, AS3356, AS22612, AS20454, AS32421
Organization: Namecheap, Inc. (NAMEC-4)
RegDate: 2015-03-06
Updated: 2015-03-06
Comment: http://namecheap.com
Comment: for any abuse please use: abuse@namecheap.com
Ref: https://rdap.arin.net/registry/ip/68.65.120.0
OrgName: Namecheap, Inc.
OrgId: NAMEC-4
Address: 11400 W. Olympic Blvd. Suite 200
City: Los Angeles
StateProv: CA
PostalCode: 90064
Country: US
RegDate: 2011-01-28

IP RElationship with another phishing https://www.virustotal.com/gui/ip-address/68.65.122.141/relations

Code:

www.coinobase.com

[$crypto$]

MetaMask Phishing Site


Website:

Code:

https://metakmax.com/

Archived: https://archive.is/wip/6ivD3

Domain name: metakmax.com
Registry Domain ID: 2621214123_DOMAIN_COM-VRSN
Registrar WHOIS Server: whois.namecheap.com
Registrar URL: http://www.namecheap.com
Updated Date: 0001-01-01T00:00:00.00Z
Creation Date: 2021-06-21T17:34:14.00Z
Registrar Registration Expiration Date: 2022-06-21T17:34:14.00Z
Registrar: NAMECHEAP INC
Registrar IANA ID: 1068

Pay more attention to the domain, phishing will never go away once I do, increase your awareness to do any search on true google if you are more likely to be a trap for you.

Official site: https://metamask.io/

[Chikito]

Website: exodus.cx
Archived: https://web.archive.org/web/20210617114319/https://exodus.cx/

Exodus Wallet still the favorite of phisher to traping user, I found one,

Code:

https://exodus.ac

Domain Name: EXODUS.AC
Registry Domain ID: D503300001198542592-LRMS
Registrar WHOIS Server: whois.rrpproxy.net
Registrar URL: http://www.key-systems.net
Updated Date: 2021-05-29T19:25:34Z
Creation Date: 2021-05-29T19:25:29Z
Registry Expiry Date: 2022-05-29T19:25:29Z

IP relationship > https://www.virustotal.com/gui/ip-address/185.178.208.182/relations

[$crypto$]

Website: exodus.cx

Code:

https://exodus.ac

DEAD

Website:

Code:

https://exocdus.co/

Archived: https://web.archive.org/web/20210702120108/https://exocdus.co/

Domain Name: exocdus.co
Registry Domain ID: DF30A1D443461467F8407478A87604E7A-NSR
Registrar WHOIS Server:
Registrar URL: https://key-systems.net
Updated Date: 2021-05-31T10:15:26Z
Creation Date: 2021-05-26T10:15:20Z
Registry Expiry Date: 2022-05-26T10:15:20Z
Registrar: Key-Systems GmbH
Registrar IANA ID: 269

The appearance of phishing sites is almost the same as those found above.

Phishing still continues to rely on the same script and only the domains are constantly changed like this, there is no tired of the fraudsters continuing to take their actions by displaying on google ad pages when doing a search.

[Chikito]

Fake and Phishing pancakeswap tools

Code:

http://hiccup.pancakeswap.tools

https://archive.is/WNyeN

IP Address: 62.210.177.59
Geolocation: FR (France), N/A, N/A, N/A N/A - Google Maps
Reverse DNS: s12.cdn-hd.com
Domain Check
Domain Name: hiccup.pancakeswap.tools
Top Level Domain: TOOLS (Manufacturing Industry)

The relation IP address with scammer; https://www.virustotal.com/gui/ip-address/62.210.177.59/relations



Be careful nobs, always check the URL correctly, and don't give any seed/private key.

[$crypto$]

Trust Wallet Fake Wallet

Website:

Code:

https://xn--tustwallet-85b.com/

Archived: https://web.archive.org/web/20210708133029/https://xn--tustwallet-85b.com/

Domain name: xn--tustwallet-85b.com
Registry Domain ID: 2625228437_DOMAIN_COM-VRSN
Registrar WHOIS Server: whois.namecheap.com
Registrar URL: http://www.namecheap.com
Updated Date: 0001-01-01T00:00:00.00Z
Creation Date: 2021-07-08T12:19:57.00Z
Registrar Registration Expiration Date: 2022-07-08T12:19:57.00Z
Registrar: NAMECHEAP INC
Registrar IANA ID: 1068

Never enter a private key/phrase on this phishing site, it's clear that there are many traps now, avoid it and look at it more carefully.

Don't be in a hurry and truswallet never asks for a key phrase/key on its website.

[$crypto$]

Coinomi phishing site

Website:

Code:

https://tatsks.com/

Archived: https://web.archive.org/web/20210708144814/https://tatsks.com/

315 days old
Created on 2020-08-27
Expires on 2021-08-27
Updated on 2020-08-27

The trick is the same as above Coinomi also never asks for a phrase on its website and this is clearly a phishing site that asks for your phrase and I think in terms of domains, they are very different, only the script is the same, so pay attention again more carefully.

Scammers like him have spread many phishing sites with different or the same scripts, so don't just randomly enter suspicious phrases.

Official site: https://www.coinomi.com/en/

[Chikito]

Trust Wallet Fake Wallet

Coinomi phishing site

We found too many phishing wallet, trust wallet, coinomi and,

Phishing Metamask Wallet

Code:

https://meta-mask.co

The scammer uses the same trick as above by inserting the mnemonic seed to get all user coins. as we know metamask wallet only asks mnemonic seed if the user first registering the wallet. this means if already registered the user only needs a password. An important point is always double-checked the URL and bookmarked it into the browser.

Domain Information;

IP Address: 67.207.81.229
Domain Name: meta-mask.co
Registry Domain ID: DD0B3077F0D0F4E3B82D5AD385883EC41-NSR
Registrar WHOIS Server: whois.namecheap.com
Registrar URL: http://www.namecheap.com
Updated Date: 2021-05-22T14:42:01Z
Creation Date: 2021-05-17T14:41:56Z
Registry Expiry Date: 2022-05-17T14:41:56Z
Registrar: NameCheap, Inc.

again,

Phishing exodus wallet

Code:

https://exoduswebv.com/

never giving up your mnemonic seed into the phishing site.

[$crypto$]

Trust Wallet Fake Wallet

Trust Wallet Fake Wallet

Website:

Code:

https://trustwalleta.com/

Archived: https://web.archive.org/web/20210712114407/https://trustwalleta.com/

Created on 2021-07-12
Expires on 2022-07-12
Updated on 0000-12-31

The script remains the same as before, just changing the domain, pay attention again and never enter a phrase/seed on any site.

Keep your assets.

[CryptoYar]

Bitcoincash phishing website

Website:

Code:

https://www.bitcolncash.org/wallets/#mobile-wallets

Domain info:

242 days old
Created on 2020-11-12
Expires on 2021-11-12
Updated on 2021-03-11

[$crypto$]

Metamask Phishing Wallet

Website:

Code:

https://extension-metamask.com.maxoutsms.com/
https://osterialatela.it/metamask/form.php

Archived:
https://archive.is/lDHVy
https://web.archive.org/web/20210713135755/https://extension-metamask.com.maxoutsms.com/

Domain Name: maxoutsms.com
Registry Domain ID: 2480891938_DOMAIN_COM-VRSN
Registrar WHOIS Server: whois.godaddy.com
Registrar URL: http://www.godaddy.com
Updated Date: 2020-10-23T10:44:11Z
Creation Date: 2020-01-16T12:02:44Z
Registrar Registration Expiration Date: 2022-01-16T12:02:44Z
Registrar: GoDaddy.com, LLC
Registrar IANA ID: 146

Metamask is another target for phishing and now with this new domain the trick is almost the same just a little change in appearance but we should be able to examine it in more detail.

What @DroomieChikito said we should check the URL and bookmark it to the browser to make it much safer and no need to type again.

[$crypto$]

Dangerous sites never click them all phishing

Website:

Code:

https://x2elon.space/
https://m-poloniex.us/login-access/us-login/Login.php
https://bittrex-global-on.com/

Archived:
https://archive.is/wip/dDEgP
https://archive.is/wip/FmiHz
https://archive.is/wip/TdCUW

Info Domain
https://whois.domaintools.com/x2elon.space
https://whois.domaintools.com/m-poloniex.us
https://whois.domaintools.com/bittrex-global-on.com






Elon Musk Giveaway - is fake and no one gives double rewards after sending BTC, beware.

Poloniex is a phishing site pay attention to the URL.

Bittrex is the same as Poloniex a phishing site and pays attention to the URL again.

Better to bookmark the original site to your browser.

[$crypto$]

Trust Wallet Fake Wallet

Trust Wallet Fake Wallet

Code:

https://atomicwallet.dev/

Trust Wallet and Atomic Phishing

Website:

Code:

https://trust-wallet-app.xyz/
https://atomicwailet.io/

Info Domain

Created on 2021-07-17
Expires on 2022-07-17
Updated on 2021-07-17

73 days old
Created on 2021-05-05
Expires on 2022-05-05
Updated on 2021-07-04

Trust Wallet - This trick is still using the same no change at all however they have updated the domain today, and I think they have plenty of backup domains to create a phishing site.

Atomic - Still the same before but the domain must be considered again, the fraudsters always scamers in the spelling of the domain letters.

Keep your assets.

[Chikito]

Trust Wallet - This trick is still using the same no change at all however they have updated the domain today, and I think they have plenty of backup domains to create a phishing site.

A scammer just bought 1 server/VPS and create many domains (free) at the same time. this has been happening ever since this thread was created. which can be proven by the IP relationship with every site he created.

Just be careful when the website comes from those IPs, they could be trying to another way.

Code:

https://trust-wallet-app.xyz/

https://www.virustotal.com/gui/ip-address/104.21.78.15/relations

Found this

Code:

ethereum-code.me

Code:

https://atomicwailet.io/

https://www.virustotal.com/gui/ip-address/185.178.208.182/relations

Found this

Code:

www.itrustwallet.org

[CryptoYar]

blockchain wallet phishing website promoted through google ads.

website:

Code:

 https://login.blockcchalh.com/#/login

Interestingly if we try to access this website through PC, it looks something like this


It seems that scammers only targeting mobiles users.

[$crypto$]

Exodus Phishing Wallet

Website:

Code:

https://exoduxs.com/

Archived: https://archive.is/wip/fIDv4

1 days old
Created on 2021-07-21
Expires on 2022-07-21
Updated on 2021-07-21

A scammer just bought 1 server/VPS and create many domains (free) at the same time. this has been happening ever since this thread was created. which can be proven by the IP relationship with every site he created.

Just be careful when the website comes from those IPs, they could be trying to another way.

Possibly this is also the same thing with scamers who have created free domains from free servers/VPS and it seems this might be an easier trick to get more domains.

[CryptoYar]

WalletConnect phishing website.


Website link:

Code:

https://www.livewallet-connect.site/

Archive: https://archive.vn/ZDZIE

Domain info.

4 days old
Created on 2021-07-18
Expires on 2022-07-18
Updated on 2021-07-18

Domain names on the same IP address:

Code:

www.livewallet-connect.site
www.capitalasia.postalswiftdelivery.com
capitalasia.postalswiftdelivery.com
groups-pnc.com
walletextention.com
livewallet-connect.site
cryptwalletconnect.com
walletsynchronizations.live
amakaclarafoundation.org
fortisonline.online
sxriuzi.com
seacroneglobal.com
savvykulture.com
laughinggoatlagos.com
enochxchange.com

[Chikito]

Possibly this is also the same thing with scamers who have created free domains from free servers/VPS and it seems this might be an easier trick to get more domains.

sure, there are many vouches for free VPS and domain that possibility the scammer create the phishing site only one day.


@mole0815 can post it here.

Again, Phishing Chipmixer

Code:

https://chipmixẹr.com

Code:

https://xn--chipmixr-z30d.com

Where I found it?, google searching.

Domain Name: chipmixẹr.com
IP Address: 162.213.251.90
Domain Name: XN--CHIPMIXR-Z30D.COM
Registry Domain ID: 2518953138_DOMAIN_COM-VRSN
Registrar WHOIS Server: whois.namecheap.com
Registrar URL: http://www.namecheap.com
Updated Date: 2021-04-01T08:02:34Z
Creation Date: 2020-04-26T15:22:12Z
Registry Expiry Date: 2022-04-26T15:22:12Z

The IP's relationship. https://www.virustotal.com/gui/ip-address/162.213.251.90/relations

Code:

https://exellentinvest.com/
https://todaycoin.club/

[$crypto$]

@mole0815 can post it here.

Again, Phishing Chipmixer

Where I found it?, google searching.

I also found a fake review about Chipmixer and even that is the same as what you just said, it seems this review has been around since 9-09-2020 was published.

The scammers actually insert their phishing sites in their original writings, if they don't look carefully, of course this will be a trap too.

https://bitcoin2.biz/mixer/7-chipmixer-review.html Fake review

Onion URL: https://chipmixerwzxtzbw.online/ Fake



The URL writing looks real but when clicked or copied the URL will be different.


Kraken Phishing Site

Website:

Code:

https://kraken-yb.com/sing-in/sign-in/us-home/
https://kraken-zp.com/sing-in/sign-in/us-home/

Archived: https://archive.is/hIRiV

Kraken-zp.com

1 days old
Created on 2021-07-22
Expires on 2022-07-22
Updated on 0000-12-31

Kraken-Yb.com

5 days old
Created on 2021-07-18
Expires on 2022-07-18
Updated on 0000-12-31

The display at login is the same there is no difference but we have to check the URL clearly and it is very different.

So they created the same 2 phishing sites.

When I wanted to open the Kraken site and do a search, it turned out that there was a phishing site that was tucked into the first page of Google search.

[moderator's note: consecutive posts merged]

[CryptoYar]

Another bitcoin & ethereum fake giveaway

website Link:

Code:

https://eventbyether.org
https://eventbyether.org/btc/
https://eventbyether.org/eth

Archive

   1 days old
Created on 2021-07-25
Expires on 2022-07-25
Updated on 2021-07-25

Wallet addresses:

Code:

Btc: 17fSZdSZMPXE4qcVENAYECk8WqwJC77yR5
Eth: 0x7f3e8fe83ED1024a50d9936A974306D5eD130Db3

[$crypto$]

Shibaswap Phishing Site

Website:

Code:

https://www.shibaswap.pw/

Archived: https://web.archive.org/web/20210726195819/https://www.shibaswap.pw/

Domain Name: SHIBASWAP.PW
Registry Domain ID: D239117758-CNIC
Registrar WHOIS Server: whois.joker.com
Registrar URL: http://joker.com
Updated Date: 2021-06-23T21:43:41.0Z
Creation Date: 2021-06-14T21:22:33.0Z
Registry Expiry Date: 2022-06-14T23:59:59.0Z
Registrar: CSL Computer Service Langenbach GmbH
Registrar IANA ID: 113

https://www.facebook.com/permalink.php?story_fbid=111089124597542&id=102901985416256

Phishing has appeared on my Facebook homepage and now they have more and more fake pages and the now I've been trying to report it, the more people report it the sooner it will be killed

Keep checking back especially for newbies who just see this on your Facebook.

SWAP official website: https://shibaswap.com/

[$crypto$]

wallectconnect.com Phishing

Website:

Code:

https://wallectconnect.com/

Archived: https://archive.is/tYEEH

Domain name: wallectconnect.com
Registry Domain ID: 2603139687_DOMAIN_COM-VRSN
Registrar WHOIS Server: whois.namecheap.com
Registrar URL: http://www.namecheap.com
Updated Date: 0001-01-01T00:00:00.00Z
Creation Date: 2021-04-06T08:34:13.00Z
Registrar Registration Expiration Date: 2022-04-06T08:34:13.00Z
Registrar: NAMECHEAP INC
Registrar IANA ID: 1068

Official site: https://walletconnect.org/

Always avoid phishing sites and pay attention to the URL if it's better then you have to save it in bookmarks

[Chikito]

Phishing Uniswap

Code:

http://app.uniswap.org.airdrop-holders-liquidity.com

scammer trying to trap the user with false connects with metamask to get the mnemonic seed.

IP Address: 192.99.170.97
domain Name: app.uniswap.org.airdrop-holders-liquidity.com

https://www.virustotal.com/gui/ip-address/192.99.170.97/relations


Also, be aware of fake google ads bitcoin core

Code:

https://www.biltucoin.org/

[$crypto$]

Pancakeswap Phishing Site

Website:

Code:

https://pancakeios.com/

Archived: https://web.archive.org/web/20210803160334/https://pancakeios.com/

1 days old
Created on 2021-08-02
Expires on 2022-08-02
Updated on 0000-12-31

This phishing site ad is being promoted on the sponsor's Facebook page and I think there will be more to it than that.
So we never click from unknown pages and try to pay attention to the URL when visiting it.

[Chikito]

Phishing Metamask Wallet

Code:

connectmetamaks.com

IP Address: 198.54.126.105
omain Name: connectmetamaks.com

Top Level Domain: COM (Commercial TLD)

Domain Name: CONNECTMETAMAKS.COM
Registry Domain ID: 2631666767_DOMAIN_COM-VRSN
Registrar WHOIS Server: whois.namecheap.com
Registrar URL: http://www.namecheap.com
Updated Date: 2021-08-05T10:41:54Z
Creation Date: 2021-08-05T10:41:29Z
Registry Expiry Date: 2022-08-05T10:41:29Z

Be careful that IP address and domain has correlated with another scam and phishing, you can check it here > https://www.virustotal.com/gui/ip-address/198.54.126.105/relations



that habit can't be erased, once he scammer will be forever, he just changes the domain with the same trick. just be careful, they are around us.

[$crypto$]

Pancakeswap Phishing Site

Website:

Code:

https://pancakeaps.finance/

Archived: https://archive.is/wip/akO2W

Domain Name: pancakeaps.finance
Registry Domain ID: e61813cd5d2c4d949111211b9a7d81f5-DONUTS
Registrar WHOIS Server: whois.namecheap.com
Registrar URL: https://www.namecheap.com/
Updated Date: 2021-08-09T09:25:50Z
Creation Date: 2021-08-09T09:23:54Z
Registry Expiry Date: 2022-08-09T09:23:54Z
Registrar: NameCheap, Inc.
Registrar IANA ID: 1068

I see almost every day phishing is always there, and this afternoon I found the Pancakeswap phishing site with a different name now and the one that was not accessible anymore, so it's true these scamers have changed the name a lot to fool beginners who don't even know the script no difference at all.

It's much better to bookmark the original URL than having to type it if you can't tell the difference.

But I'm sure there must be people trapped outside the forum.

[$crypto$]

Binance Giveaway Fake

Website:

Code:

https://bince-x2x3bonus.com/

Archived: https://web.archive.org/web/20210816132421/https://bince-x2x3bonus.com/

Domain Name: bince-x2x3bonus.com
Registry Domain ID: 2633563772_DOMAIN_COM-VRSN
Registrar WHOIS Server: whois.registrar.eu
Registrar URL: http://www.registrar.eu
Updated Date: 2021-08-13T12:52:57Z
Creation Date: 2021-08-13T10:52:45Z
Registrar Registration Expiration Date: 2022-08-13T10:52:45Z
Registrar: Hosting Concepts B.V. d/b/a Registrar.eu
Registrar IANA ID: 1647

Fake giveaways have appeared again and they have added a lot of members on the telegram channel, so for beginners who just know please be careful never to send any funds offered by them on telegram.

[CryptoYar]

Fake BTC and Eth Giveaway

Website:

Code:

https://elon-musk2021.com/

Archived: https://archive.vn/Ue4ac

Domain info:
   

1 days old
Created on 2021-08-17
Expires on 2022-08-17
Updated on 2021-08-17

Scammers promoting this website on YouTube along with a video clip of the bitcoinword conference.

Video link: https://youtu.be/KYdm5mzd2Mk

Scammers wallets:

Code:

Btc: 0xE09Ac45DE32feD3489e8891d22dD6EA9FdEFCA64
Eth: 0xE09Ac45DE32feD3489e8891d22dD6EA9FdEFCA64

[$crypto$]

Walletconnet Phishing Site:

Website:

Code:

https://waletconnector.com/

Archived: https://archive.ph/wip/29wgA

Domain Name: waletconnector.com
Registry Domain ID: 2603389585_DOMAIN_COM-VRSN
Registrar WHOIS Server: whois.registrar.eu
Registrar URL: http://www.registrar.eu
Updated Date: 2021-04-07T07:44:12Z
Creation Date: 2021-04-07T05:42:13Z
Registrar Registration Expiration Date: 2022-04-07T05:42:13Z
Registrar: Hosting Concepts B.V. d/b/a Registrar.eu
Registrar IANA ID: 1647

There is no difference the script remains the same and it seems like scamers continue to use this script but they only change in terms of the spelling of the domain, and this is the most important thing to pay attention to.

stay alert.

[$crypto$]

Two TrustWallet phishing sites

Website:

Code:

https://titrustwallat.com/
https://trustlivewallet.com/

Archived:
https://archive.ph/LdcJi
https://archive.ph/wip/5afJ6

Created on 2021-08-27
Expires on 2022-08-27
Updated on 2021-08-27

92 days old
Created on 2021-05-27
Expires on 2022-05-27
Updated on 2021-06-15

Phishing sites always ask for your phrase to be entered into the site so, beginners should be careful and look at the URL again and distinguish it from the original, because a group of scamers now have a lot of advertising on Facebook that almost resembles the original page.

[Ultegra134]

I don't get how I fell for such a scam, when there's even a thread about it right here. (I was just informed by another user about this thread). I don't get why I didn't look it up earlier before conducting such a stupid move. Anyway, do not trust anyone on Discord, and keep in mind that project officials/admins will NEVER DM you.

This was a lesson for me, I almost lost all the money I was talking about in my Bitcointalk appreciation thread (https://bitcointalk.org/index.php?topic=5356169). It would suck big time if now I made a thread "How I lost all my money".

The website I'm referring to is the following:

Code:

Website: https://multibridge-dapps.com/

Archive: http://web.archive.org/web/20210831175418/https://multibridge-dapps.com/

I put my private key there, because it wouldn't automatically "authorize". What a dumbass I am. Fortunately, my gut instinct kicked in and the very next second I did that stupid move, I moved all my funds to another wallet.

Be safe, do not trust anyone and never input any confidential information EVER!

[Chikito]

I put my private key there, because it wouldn't automatically "authorize". What a dumbass I am. Fortunately, my gut instinct kicked in and the very next second I did that stupid move, I moved all my funds to another wallet.

Be safe, do not trust anyone and never input any confidential information EVER!

You have to edit that link to unclickable to avoid another user access it

Code:

https://multibridge-dapps.com/

that could be a lesson for you and everyone to recheck and always learning in the next time.

the website was created 14 days ago which purposes for the scam.

IP: 198.187.31.167
Domain Name: MULTIBRIDGE-DAPPS.COM
Registry Domain ID: 2633753046_DOMAIN_COM-VRSN
Registrar WHOIS Server: whois.namecheap.com
Registrar URL: http://www.namecheap.com
Updated Date: 2021-08-14T17:47:29Z
Creation Date: 2021-08-14T17:33:13Z

the scammer usually uses the same server and IP address to create another one.

See the related IP: https://www.virustotal.com/gui/ip-address/198.187.31.167/relations

Code:

https://www.safemoonmaxsfax.com/
www.coinlitefx.com
https://www.coin-star.net/

...etc

the scammer creates another way when failed on the first step, just to look at what they create, token, exchange, cloud mining and etc.

[Ultegra134]

I put my private key there, because it wouldn't automatically "authorize". What a dumbass I am. Fortunately, my gut instinct kicked in and the very next second I did that stupid move, I moved all my funds to another wallet.

Be safe, do not trust anyone and never input any confidential information EVER!

You have to edit that link to unclickable to avoid another user access it

Code:

https://multibridge-dapps.com/

that could be a lesson for you and everyone to recheck and always learning in the next time.

the website was created 14 days ago which purposes for the scam.

IP: 198.187.31.167
Domain Name: MULTIBRIDGE-DAPPS.COM
Registry Domain ID: 2633753046_DOMAIN_COM-VRSN
Registrar WHOIS Server: whois.namecheap.com
Registrar URL: http://www.namecheap.com
Updated Date: 2021-08-14T17:47:29Z
Creation Date: 2021-08-14T17:33:13Z

the scammer usually uses the same server and IP address to create another one.

See the related IP: https://www.virustotal.com/gui/ip-address/198.187.31.167/relations

Code:

https://www.safemoonmaxsfax.com/
www.coinlitefx.com
https://www.coin-star.net/

...etc

the scammer creates another way when failed on the first step, just to look at what they create, token, exchange, cloud mining and etc.

Alright, changed it. It was definitely a lesson learned, I'm not responding to any messages I receive from unknown people nor am I going to give out such information ever again.

I was one of the lucky ones, that at least immediately realized what a stupid thing I've done.

[$crypto$]

Exodus Site Phishing

Website:

Code:

https://crypto-bonus.top/

Archived: https://archive.ph/wip/aFYPB

Domain Name: crypto-bonus.top
Registry Domain ID: D20210904G10001G_68339676-top
Registrar WHOIS Server: whois.namesilo.com
Registrar URL: https://www.namesilo.com
Updated Date: 2021-09-03T18:47:03Z
Creation Date: 2021-09-03T18:43:40Z
Registry Expiry Date: 2022-09-03T18:43:40Z
Registrar: NameSilo,LLC
Registrar IANA ID: 1479

FAKE: https://www.facebook.com/permalink.php?story_fbid=108800091537768&id=108797548204689

There have been many fake sites with ads on Facebook, so if you don't know, especially beginners, don't click on anything because the promotion always offers a bonus that is supposed to include a phrase/seed.

The point is to avoid this.

[$crypto$]

Metamask Site Phishing

Website:

Code:

https://www.kyc-metamask.io/

Archived: https://archive.ph/wip/LOnzv

Domain Name: KYC-METAMASK.IO
Registry Domain ID: D503300001201715023-LRMS
Registrar WHOIS Server: whois.godaddy.com
Registrar URL: http://www.godaddy.com
Updated Date: 2021-08-30T06:33:28Z
Creation Date: 2021-08-30T06:21:11Z
Registry Expiry Date: 2022-08-30T06:21:11Z
Registrar Registration Expiration Date:
Registrar: GoDaddy.com, LLC
Registrar IANA ID: 146

FAKE: https://www.facebook.com/permalink.php?story_fbid=111449014596773&id=108198504921824

Like my post a few hours ago, when I surf on Facebook I always find fake pages like this that are always worrying about other people who don't know anything, so don't ever click on a page on Facebook if you don't know anything.

[Chikito]

Domain Name: KYC-METAMASK.IO
Registry Domain ID: D503300001201715023-LRMS
Registrar WHOIS Server: whois.godaddy.com
Registrar URL: http://www.godaddy.com
Updated Date: 2021-08-30T06:33:28Z
Creation Date: 2021-08-30T06:21:11Z
Registry Expiry Date: 2022-08-30T06:21:11Z
Registrar Registration Expiration Date:
Registrar: GoDaddy.com, LLC
Registrar IANA ID: 146

The domain from IP address : 34.102.136.180 which marked bad by every community on virus total, see this: https://www.virustotal.com/gui/ip-address/34.102.136.180/community called: Phishing distribution server, the scammer creates, Phishing, malicious, malware and etc. masquerade on  Amazon and another crypto site.

and, SSH bruteforce attack, also



let's report it to godday > abuse@godaddy.com

[Chikito]

Phishing axie infinity website

Code:

https://axieinfinity.monster/

IP Address: 172.67.194.217
Domain Name: AXIEINFINITY.MONSTER
Registry Domain ID: D247748994-CNIC
Registrar WHOIS Server: whois.namecheap.com
Registrar URL: https://namecheap.com
Updated Date: 2021-08-29T13:13:53.0Z
Creation Date: 2021-08-29T12:16:57.0Z
Registry Expiry Date: 2022-08-29T23:59:59.0Z
Registrar: Namecheap

the IP relationship: https://www.virustotal.com/gui/ip-address/172.67.194.217/relations

the domain has created a month ago, that possible person who don't know the real game site can possible get the trap and write the detailed seed into phishing, they put the trap with a fool the broken metamask. Be carefull.

[$crypto$]

Pancakeswap Phishing Site

Website

Code:

https://pancake-swap.co/

Archived: https://archive.md/C4q9X

Domain Name: pancake-swap.co
Registry Domain ID: D2431850C211A4DD187AE420AF4DB121C-GDREG
Registrar WHOIS Server: whois.namecheap.com
Registrar URL: http://www.namecheap.com
Updated Date: 2021-09-03T18:48:23Z
Creation Date: 2021-08-29T18:48:22Z
Registry Expiry Date: 2022-08-29T18:48:22Z
Registrar: NameCheap, Inc.
Registrar IANA ID: 1068

FAKE: https://www.facebook.com/103144675449101/posts/103151822115053/

Don't ever click in this fake Facebook page, they are trying to create more phishing sites and spread on facebook and of course they should check the URL.

[$crypto$]

Phishing axie infinity website

Code:

https://axieinfinity.monster/

Phishing Axie Infinity Site

Website:

Code:

https://marketplaceaxiesinfinity.com/

Archived: https://archive.md/wip/TUoo9

Domain Name: MARKETPLACEAXIESINFINITY.COM
Registry Domain ID: 2638995766_DOMAIN_COM-VRSN
Registrar WHOIS Server: whois.publicdomainregistry.com
Registrar URL: www.publicdomainregistry.com
Updated Date: 2021-09-06T00:55:27Z
Creation Date: 2021-09-05T23:37:59Z
Registrar Registration Expiration Date: 2022-09-05T23:37:59Z
Registrar: PDR Ltd. d/b/a PublicDomainRegistry.com
Registrar IANA ID: 303

FAKE: https://www.facebook.com/100961772285091/posts/129622502752351/

Maybe this phishing site is still related to what you found, I'm not surprised anymore when I continue to be on Facebook I always find things like this, I think everyone needs to be careful.
Even I now see so many streams from facebook about Axie Infinity game, please pay attention about this phishing site.

[Chikito]

Maybe this phishing site is still related to what you found, I'm not surprised anymore when I continue to be on Facebook I always find things like this, I think everyone needs to be careful.
Even I now see so many streams from facebook about Axie Infinity game, please pay attention about this phishing site.

maybe yes, but with a different server and IPs. Facebook and Twitter or Any social media are beautiful places for scammers to get into the trap because in those places too many people don't know how to distinguish real and fake.

like this one, I found it on Twitter

Code:

http://axieinfinity.tel

Same as above, that link directing to put the mnemonic seed.

IP Address: 104.21.90.27
Domain Name: axieinfinity.tel
Registry Domain ID: DE17E66F501AA4B2181E6A4632F423070-GDREG
Registrar WHOIS Server: whois.opensrs.net
Registrar URL: www.opensrs.com
Updated Date: 2021-09-10T22:00:10Z
Creation Date: 2021-09-10T21:52:07Z
Registry Expiry Date: 2022-09-10T21:52:07Z
Registrar: Tucows Domains Inc.

the relationship: https://www.virustotal.com/gui/ip-address/104.21.90.27/relations

[$crypto$]

Chipminxer Phishing

Website:

Code:

https://chipminxer.com/

Archived: https://archive.md/wip/Xr0kT

37 days old
Created on 2021-08-11
Expires on 2022-08-11
Updated on 2021-08-12

REAL


FAKE

[Chikito]

Chipminxer Phishing

Website:

Code:

https://chipminxer.com/

Archived: https://archive.md/wip/Xr0kT

I'm not surprised when comes from that popular site. when I checked, phishing sites using that name are increasing every day. A year ago, when I checked using a domain similar tool only about 100's, but now increased to be 250 with a similar Chipmixer name.

https://dnstwister.report/search?ed=636869706d697865722e636f6d

Some of the domains are still alive with the same interface as real a Chipmixer.

Code:

https://chipmlxer.com/

that impossible to stoping the scammer create a new one. but the owner can get an alert (by sign up), so when the scammer creates a similar domain, the owner can report quickly too; https://safebrowsing.google.com/safebrowsing/report_general/

[$crypto$]

Solana Fake Giveaway

Website:

Code:

https://get-sol.net/sol/

Archived: https://archive.ph/wip/Xcdok

Domain Name: GET-SOL.NET
Registry Domain ID: 2636323475_DOMAIN_NET-VRSN
Registrar WHOIS Server: whois.regtime.net
Registrar URL: http://www.webnames.ru
Updated Date: 2021-08-25T15:55:08Z
Creation Date: 2021-08-25T00:00:00Z
Registrar Registration Expiration Date: 2022-08-25T04:00:00Z
Registrar: REGTIME LTD.
Registrar IANA ID: 1362

This trick is still the same as other fake giveaways, but this time it is Solana who is indeed a trending topic, whichever is the increase, the scamers have created this scheme, I emphasize for beginners you have to be careful with this unreasonable offer.

Keep your money much safer.

[Baofeng]

Fake Sushi Swap:

Code:

https://sushi-app.com/

Archived: https://archive.is/bNuBS



Doman Info:

Dates    Created on 2021-09-22
Expires on 2022-09-21
Updated on 2021-09-21    
  
Name Servers    PNS41.CLOUDNS.NET (has 202,270 domains)
PNS42.CLOUDNS.NET (has 202,270 domains)
PNS43.CLOUDNS.NET (has 202,270 domains)
PNS44.CLOUDNS.NET (has 202,270 domains)
   
  
Tech Contact    REDACTED FOR PRIVACY
REDACTED FOR PRIVACY,
REDACTED FOR PRIVACY, REDACTED FOR PRIVACY, REDACTED FOR PRIVACY, REDACTED FOR PRIVACY
(p) (f)
IP Address    185.117.2.82 - -1 other site is hosted on this server

Just recently updated by the scammers, the real website is: https://sushi.com/.

So be careful on sites that you visited, as you might fall for this kind of tricks from scammers.

[$crypto$]

Solana Fake Giveaway

Website:

Code:

https://solana-donate.com/

Archived: https://archive.ph/OT4Fa

Domain Name: solana-donate.com
Registry Domain ID: 2635803775_DOMAIN_COM-VRSN
Registrar WHOIS Server: whois.namesilo.com
Registrar URL: https://www.namesilo.com/
Updated Date: 2021-08-24T07:00:00Z
Creation Date: 2021-08-23T07:00:00Z
Registrar Registration Expiration Date: 2022-08-23T07:00:00Z
Registrar: NameSilo, LLC
Registrar IANA ID: 1479

Remember! this is just a fake giveaway and it has appeared before so beginners should stay alert don't be too greedy to want to take profit because this is a trap launched by scamers so beginners should know this thread because I will continue to update phishing/giveaway publish here.

[Chikito]

Phishing Exodus wallet still active until now, I don't know why the exodus team very slowly to take action, seems they don't have care about his customer.

Code:

https://exoduus.xyz

IP Address: 156.67.73.98
Domain Name: EXODUUS.XYZ
Registry Domain ID: D251530919-CNIC
Registrar WHOIS Server: whois.hostinger.com
Registrar URL: https://www.hostinger.com/
Updated Date: 2021-09-22T20:21:50.0Z
Creation Date: 2021-09-22T20:21:49.0Z

the relationship https://www.virustotal.com/gui/ip-address/156.67.73.98/relations

Code:

www.mooncake.website

[Kittygalore]

Phishing Exodus wallet still active until now, I don't know why the exodus team very slowly to take action, seems they don't have care about his customer.

Probably because they're benefiting from not taking action towards their issues, I mean if I was in that position, I'll try and make it as slow as possible if I know that I'm benefiting highly from that issue.

[Chikito]

Phishing Exodus wallet still active until now, I don't know why the exodus team very slowly to take action, seems they don't have care about his customer.

Probably because they're benefiting from not taking action towards their issues, I mean if I was in that position, I'll try and make it as slow as possible if I know that I'm benefiting highly from that issue.

playing with fire, when they can not handle it, will burn them themselves and company.

that way is very different from others, another developer wallet always warn to do not traped the phishing site every time.

I'm not interested to use the wallet when they never oversight and or take any action, that is very dangerous, the original could be also easy to infiltrate, who is knows?.

[Chikito]

Fake-Phishing minttswap

Code:

http://minttswap.com/

this is the fake way to manage all your wallets from a single app (phishing trap)

IP Address: 143.198.57.27
Domain Name: MINTTSWAP.COM
Registry Domain ID: 2644270917_DOMAIN_COM-VRSN
Registrar WHOIS Server: whois.namesilo.com
Registrar URL: http://www.namesilo.com
Updated Date: 2021-09-28T19:03:15Z
Creation Date: 2021-09-28T19:00:36Z
Registry Expiry Date: 2022-09-28T19:00:36Z
Registrar: NameSilo, LLC
Registrar IANA ID: 1479
Registrar Abuse Contact Email: abuse@namesilo.com
Registrar Abuse Contact Phone: +1.4805240066
Domain Status: clientTransferProhibited https://icann.org/epp#clientTransferProhibited
Name Server: NS1.DIGITALOCEAN.COM
Name Server: NS2.DIGITALOCEAN.COM

The relationship with another phishing: https://www.virustotal.com/gui/ip-address/143.198.57.27/relations

Code:

pancakeswaap.net
synchronizewalet.net
synchronizewalet.org

[Baofeng]

Fake Opensea market website:

Code:

https://opènsea.net/wallet/page.html

Archive: https://archive.is/3HYSD

It is very similar to the original site, thus making it very dangerous for inexperienced users. Don't connect your wallet to this site as you will obviously gets hack and lose your precious coins.

Registrant    Withheld for Privacy Purposes
Registrant Org    Privacy service provided by Withheld for Privacy ehf
Registrant Country    is
Registrar    NAMECHEAP INC NameCheap, Inc.
IANA ID: 1068
URL: http://www.namecheap.com
Whois Server: whois.namecheap.com

(p)
Registrar Status    addPeriod, clientTransferProhibited
Dates    29 days old
Created on 2021-09-02
Expires on 2022-09-02
Updated on 0000-12-31    
 
Name Servers    DNS1.REGISTRAR-SERVERS.COM (has 7,669,646 domains)
DNS2.REGISTRAR-SERVERS.COM (has 7,669,646 domains)
   
 
Tech Contact    Withheld for Privacy Purposes
Privacy service provided by Withheld for Privacy ehf
Kalkofnsvegur 2,
Reykjavik, Capital Region, 101, is

(p)
IP Address    206.188.196.8 is hosted on a dedicated server
   
 
IP Location    United States - Wyoming - Sheridan - Bl Networks
ASN    United States AS399629 BLNWX, US (registered Apr 30, 2021)
Domain Status    Never Registered Before
IP History    1 change on 1 unique IP addresses over 0 years    
 
Hosting History    1 change on 2 unique name servers over 0 year

[Chikito]

Fake and Phishing validatewallet.tech

Code:

http://www.validatewallet.tech

IP Address: 169.255.59.10
Domain Name: VALIDATEWALLET.TECH
Registry Domain ID: D252536369-CNIC
Registrar WHOIS Server: whois.web4africa.net
Registrar URL: https://web4africa.com
Updated Date: 2021-09-30T04:14:30.0Z
Creation Date: 2021-09-30T04:14:29.0Z
Registry Expiry Date: 2022-09-30T23:59:59.0Z
Registrar: Web4Africa Ltd.
Registrar IANA ID: 664

The IP relationship: https://www.virustotal.com/gui/ip-address/169.255.59.10/relations

Code:

www.walletvalidators.com
www.tokenrelease.net
www.coinxpad.xyz
pancakeswap.coinxpad.xyz
www.trust-wallet.live

......

more ....Fake..

Scammer trying to create fake sync wallet to dapps. After connected, the scammer asking a seed and private key and stolen all token inside the wallet.

[$crypto$]

Ranger Protocol fake sale

Website:

Code:

https://polkastarter.sa.com/rangersprotocol
https://www.bscpad.ca/project/RangersProtocol

That Rangers Protocol will start IDO on Polkastarter on 7 October.
This is the announcement.: https://twitter.com/rangersprotocol/status/1445032666655600645
As an official IDO: https://www.polkastarter.com/projects/rangers-protocol


Fake Polkastarter

Website:

Code:

https://polkastarter.direct/

Archived: https://archive.ph/wip/oZivj

12 days old
Created on 2021-09-22
Expires on 2022-09-22
Updated on 2021-09-27

In terms of appearance, it is slightly different and the official one uses a black background, while the phishing one uses a white background.
You have to distinguish between easy things.

The official website: https://www.polkastarter.com/

[$crypto$]

Ethereum Fake Giveaway

Website:

Code:

https://mediumn.us/eth/index.html

Archived: https://archive.ph/9TYW9

Domain Name: mediumn.us
Registry Domain ID: D2B0D73284CE84239AF407BD0DE018F8C-GDREG
Registrar WHOIS Server: whois.namecheap.com
Registrar URL: http://www.namecheap.com
Updated Date: 2021-10-05T08:47:56Z
Creation Date: 2021-09-30T08:47:56Z
Registry Expiry Date: 2022-09-30T08:47:56Z
Registrar: NameCheap, Inc.
Registrar IANA ID: 1068
Registrar Abuse Contact Email:

Scammers spread on Facebook to be careful and never follow this offer wherever you find it clearly this Giveaway is a fake.

I'll be posting here often if I find anything else about scamers on facebook.

Be careful.

FAKE: https://www.facebook.com/103440387917736/posts/386254322969673/

[$crypto$]

Huobi Team Fake Giveaway

Website:

Code:

https://medium.huobi-giveaway.net/

Archived: https://archive.ph/wip/aS8Lt

Domain Name: huobi-giveaway.net
Registry Domain ID: 2643880090_DOMAIN_NET-VRSN
Registrar WHOIS Server: whois.registrar.eu
Registrar URL: http://www.registrar.eu
Updated Date: 2021-09-27T22:47:21Z
Creation Date: 2021-09-27T12:34:00Z
Registrar Registration Expiration Date: 2022-09-27T12:34:00Z
Registrar: Hosting Concepts B.V. d/b/a Registrar.eu
Registrar IANA ID: 1647

Back again, something like this is on Telegram, so if you already know it's better to go out and block it because this will definitely be added automatically by bots, so stay alert for classic tricks like this.

[$crypto$]

Shiba INU Phishing Site

Website:

Code:

http://shiba-inu.site/

Archived: https://archive.ph/Cvy6E

[/quote]
Domain Name: SHIBA-INU.SITE
Registry Domain ID: D250518249-CNIC
Registrar WHOIS Server: whois.webnic.cc
Registrar URL: http://www.webnic.cc
Updated Date: 2021-10-02T01:43:38.0Z
Creation Date: 2021-09-15T12:06:23.0Z
Registry Expiry Date: 2022-09-15T23:59:59.0Z
Registrar: Web Commerce Communications Ltd
Registrar IANA ID: 460
[/quote]



Because Shiba INU's pumping has increased significantly so more scamers will take advantage of this situation, so be careful because more sites will be spread about Shiba INU because they want to take your money when entering Seed/phrases.

[$crypto$]

Chipmixer.com.mx Phishing

Website:

Code:

https://chipmixer.com.mx/

Archived:

16 days old
Created on 2021-09-22
Expires on 2022-09-22
Updated on 2021-09-29

https://archive.ph/wip/FiZrE

REAL


FAKE


Maybe it's just a slight difference but it's all phishing that I found.

Keep guarding your assets.

Hope you guys are not trapped from so many phishing sites.

[$crypto$]

Solana Giveaway Fake

Website:

Code:

https://solana-giveaway.net/

Archived: https://archive.ph/wip/Dvuya

2 days old
Created on 2021-10-07
Expires on 2022-10-07
Updated on 2021-10-07

The classic trick is still being used by scammers and maybe those who have been in crypto for a long time know that this is a fake return, so this should definitely be avoided.
Scammers will always spread on telegram.

[Baofeng]

Fake Optimism.io website, very dangerous as once you connect your wallet, everything will be gone.

So please be careful specially for newbies out there as you can easily fall for this trick.

Website:

Code:

https://optimusm.io/

Real Website: https://www.optimism.io/


 
Archive: https://archive.is/uG1gN

Registrant Org    See PrivacyGuardian.org
Registrant Country    us
Registrar    Namesilo, LLC
IANA ID: 1479
URL: http://www.namesilo.com
Whois Server: whois.namesilo.com

(p)
Registrar Status    clientTransferProhibited
Dates    82 days old
Created on 2021-07-20
Expires on 2022-07-20
Updated on 2021-09-18    
  
Name Servers    AUTUMN.NS.CLOUDFLARE.COM (has 22,400,811 domains)
FRED.NS.CLOUDFLARE.COM (has 22,400,811 domains)
   
  
Tech Contact    —
IP Address    104.21.92.2 - 367 other sites hosted on this server

[Chikito]

Phishing Web Ronin Wallet

Code:

https://roninweb.org

Domain Name: roninweb.org
IP Address: 67.207.81.229
Registry Domain ID: D402200000017396058-LROR
Registrar WHOIS Server: whois.namecheap.com
Registrar URL: http://www.namecheap.com
Updated Date: 2021-09-23T03:51:09Z
Creation Date: 2021-07-24T10:18:11Z
Registry Expiry Date: 2022-07-24T10:18:11Z
Registrar Registration Expiration Date:
Registrar: NameCheap, Inc.
Registrar IANA ID: 1068

there is no ronin wallet for the web, that site is a possible scam. and Ronin is currently not available on Google Play and iOS App Store also.

The original web is https://roninwallet.io/ (the wallet currently available for extension only - chrome and firefox)

[$crypto$]

Pancakelswap Phishing Site

Website:

Code:

https://pancakelswap.finance/

Archived: https://archive.ph/oPHCm

Domain Name: pancakelswap.finance
Registry Domain ID: b2f15718b3dd489fa1253a5ccc6df578-DONUTS
Registrar WHOIS Server: whois.porkbun.com
Registrar URL: http://porkbun.com
Updated Date: 2021-07-19T15:30:48Z
Creation Date: 2021-07-14T15:30:30Z
Registry Expiry Date: 2022-07-14T15:30:30Z
Registrar: Porkbun LLC
Registrar IANA ID: 1861

The Pancakeswap phishing site is getting more and more common, so pay attention to the original URL and never search on Google because there are always fake ad pages inserted at the top.

I will keep reminding you.

Original site. https://pancakeswap.finance/

[$crypto$]

Shiba airdrop Fake Giveaway

Website:

Code:

https://shiba-airdrops.org/

Archived: https://archive.ph/wip/gMmFQ

Domain Name: SHIBA-AIRDROPS.ORG
Registry Domain ID: D402200000018020143-LROR
Registrar WHOIS Server: whois.namecheap.com
Registrar URL: http://www.namecheap.com
Updated Date: 2021-10-08T17:22:09Z
Creation Date: 2021-10-08T16:12:05Z
Registry Expiry Date: 2022-10-08T16:12:05Z
Registrar Registration Expiration Date:
Registrar: NameCheap, Inc.
Registrar IANA ID: 1068

Don't be too greedy for profit then we have to take enough and it should be clear from real trading/investing.
So, avoid this kind of giveaway, they continue to do the same way to trap you, so avoid it and pay attention again.

[Kavelj22]

I don't know if it's allowed to report fake mobile apps here. I accidentally came across this thread after found no dedicated topic to report mobile apps.

Fake App:

Code:

https://play.google.com/store/apps/details?id=pancakeswap.development.team&showAllReviews=true

Details:
Three Fake PancakeSwap Apps Flood Google Play Store With 12K+ Downloads
Three fake pancakeswap apps exist on android play store

PancakeSwap has no app available for mobiles. It's only running on web version.

[$crypto$]

Chipmixeres Fake Site

Website:

Code:

https://chipmixeres.com/

Archived: https://archive.ph/wip/xtRRe

11 days old
Created on 2021-10-04
Expires on 2022-10-04
Updated on 2021-10-04

For the umpteenth time, new domains will continue to be created so that it will continue to resemble the script, but there are always differences when examined further.

Phishing sites will not disappear forever, the important thing is that we realize and be more careful.

[Chikito]

I don't know if it's allowed to report fake mobile apps here. I accidentally came across this thread after found no dedicated topic to report mobile apps.

It's allowed,
but better you put archive links and pictures like the post above because fake mobile apps will remove it fast after reporting it to google.


Fake Metamask

Code:

https://xn--metamsk-lwa.org
https://metamásk.org/
https://metama'sk.org/

https://web.archive.org/web/20211015224941/https://xn--metamsk-lwa.org/

Domain Name: XN--METAMSK-LWA.ORG
Registry Domain ID: D402200000018058544-LROR
Registrar WHOIS Server: whois.reg.com
Registrar URL: http://www.reg.com
Updated Date: 2021-10-13T11:50:17Z
Creation Date: 2021-10-13T11:50:15Z
Registry Expiry Date: 2022-10-13T11:50:15Z
Registrar Registration Expiration Date:
Registrar: Registrar of Domain Names REG.RU LLC

I found it on google adds, still many fake/phishing aplication on google adds, just be careful and don't forget to install AdBlock.

[$crypto$]

Shiba Swap Phishing Site

Website:

Code:

https://www.shibaswap.agency/

Archived: https://archive.ph/xUDhU

Domain Name: shibaswap.agency
Registry Domain ID: 70a3137bfa4e41c687475d3d3ca09290-DONUTS
Registrar WHOIS Server: whois.namesilo.com
Registrar URL: http://www.namesilo.com
Updated Date: 2021-09-01T10:46:24Z
Creation Date: 2021-08-27T10:46:23Z
Registry Expiry Date: 2022-08-27T10:46:23Z
Registrar: NameSilo, LLC
Registrar IANA ID: 1479

FAKE: https://www.facebook.com/104794375263554/posts/123281350081523/

Please help report a Facebook page like this is real they keep targeting beginners with the lure of $1000 to claim even though this is bullshit.

[Chikito]

Fake and Phishing Metamask

Code:

https://metaj-maskl.online/

IP Address: 104.21.77.122
Domain Name: METAJ-MASKL.ONLINE
Registry Domain ID: D255554409-CNIC
Registrar WHOIS Server: whois.hostinger.com
Registrar URL: https://www.hostinger.com/
Updated Date: 2021-10-20T21:04:31.0Z
Creation Date: 2021-10-20T19:38:40.0Z

The Ip's Relationship: https://www.virustotal.com/gui/ip-address/104.21.77.122/relations

Where did I find this site? Google searching

So be careful to do not use search engine machines, I don't know why My Adblock didn't work for this time,

[$crypto$]

Pancuckeswop Phishing Site

Website

Code:

https://pancuckeswop.com/

Archived: https://archive.ph/wip/9lsJP

4 days old
Created on 2021-10-19
Expires on 2022-10-19
Updated on 0000-12-31

The domain name is too flashy so that it will be easy to know, ordinary people will understand that this is a fake dex site, but yes, not all beginners know it, of course there are more stupid ones, so this needs to be looked at again about URLs if you want to swap Dex, because now almost every dex there must be an imitation for phishing.

Be careful.

[Baofeng]

Fake sudoswap website:

Website:

Code:

https://sudoswap.app/

Archived: https://archive.md/pcuLg

Real website: https://sudoswap.xyz/#/



Domain info:

Registrant    REDACTED FOR PRIVACY
Registrant Org    Private Person
Registrant Country    ru
Registrar    Key-Systems LLC
IANA ID: 1345
URL: http://www.key-systems.net
Whois Server: whois.nic.google

(p)
Registrar Status    clientTransferProhibited
Dates    8 days old
Created on 2021-10-15
Expires on 2022-10-15
Updated on 2021-10-20    
  
Name Servers    NS1.HOSTING.REG.RU (has 1,609,205 domains)
NS2.HOSTING.REG.RU (has 1,609,205 domains)
   
  
Tech Contact    REDACTED FOR PRIVACY
REDACTED FOR PRIVACY,
REDACTED FOR PRIVACY, REDACTED FOR PRIVACY, REDACTED FOR PRIVACY, REDACTED FOR PRIVACY
IP Address    31.31.198.240 - 1,439 other sites hosted on this server
   
  
IP Location    Russian Federation - Moskva - Moskva - Domain Names Registrar Reg.ru Ltd

[$crypto$]

Sol Giveaway Fake

Website:

Code:

https://x2solevent.com/sol/

Archived: https://archive.ph/wip/REmGF

2 days old
Created on 2021-10-25
Expires on 2022-10-25
Updated on 2021-10-25

The scammers keep spreading this via Telegram and somehow I'm always getting put in this trap, for me this is indeed a fake giveaway but what about newbies who don't know? I'm afraid they will get stuck and send the soles there so they don't get any returns, so stay careful and don't be greedy.

Remain cautious

[$crypto$]

Pancakeswap Phishing Site

Website:

Code:

https://pancakeswap.v1beta.finance/

Archived: https://archive.ph/AiUnX

3 days old
Created on 2021-10-24
Expires on 2022-10-24
Updated on 2021-10-24

FAKE: https://www.facebook.com/104671428685585/posts/104674648685263/

Still keep seeing like this on Facebook page and I remind you never to click anything from FB if you want to use the original Pancakeswap and better type the correct URL to avoid this kind of thing.

Be careful.

[$crypto$]

Shiba Fake Giveaway

Website:

Code:

https://shiba-bonuses.com/

Archived: https://archive.ph/wip/DvS48

Domain name: shiba-bonuses.com
Registry Domain ID: 2651093510_DOMAIN_COM-VRSN
Registrar WHOIS Server: whois.namecheap.com
Registrar URL: http://www.namecheap.com
Updated Date: 0001-01-01T00:00:00.00Z
Creation Date: 2021-10-29T12:06:59.00Z
Registrar Registration Expiration Date: 2022-10-29T12:06:59.00Z
Registrar: NAMECHEAP INC
Registrar IANA ID: 1068

There will be more scams under the guise of any kind including giveaways or other rewards by depositing first, so with Shiba tokens being pumped, don't do anything with high returns because basically they are beginners who don't know.

Make sure you don't get entangled in things like this and be careful.

[$crypto$]

Swap-coins Phishing Site

Website:

Code:

https://swap-coins.com/

Archived: https://archive.ph/wip/uaEb6

4 days old
Created on 2021-10-27
Expires on 2022-10-27
Updated on 2021-10-27

FAKE: https://www.facebook.com/100074569651604/posts/100545275774461/

edit:
I'm adding a note here that the link from Facebook is still active so I hope more people will report it so the page can be deactivated as soon as possible, because now I see more tricks like this.

[$crypto$]

Phantocm Phishing Site

Website:

Code:

https://phantocm.app/

Archived: https://archive.ph/cNmWE

Domain Name: phantocm.app
Registry Domain ID: 47F05DB01-APP
Registrar WHOIS Server: whois.porkbun.com
Registrar URL: https://porkbun.com/
Updated Date: 2021-10-31T11:05:15Z
Creation Date: 2021-10-31T11:05:14Z
Registry Expiry Date: 2022-10-31T11:05:14Z
Registrar: Porkbun LLC
Registrar IANA ID: 1861

Phishing ads appear again in google search even though my browser is already using the AdBloker extension, they still appear when doing a search, so they are quite good at putting fake pages on google.

I hope this needs to be taken seriously and carefully.

[$crypto$]

Pancakeswap Finance Connected

Website:

Code:

https://pancaakeswap.finance-connected.com/

Archived: https://archive.ph/wip/UUVvy

Domain Name: finance-connected.com
Registry Domain ID: D202110171404806-COM
Registrar WHOIS Server: whois.nicenic.net
Registrar URL: http://www.nicenic.net
Updated Date: 2021-10-16T18:09:02Z
Creation Date: 2021-10-16T18:09:02Z
Registrar Registration Expiration Date: 2022-10-16T18:07:51Z
Registrar: NICENIC INTERNATIONAL GROUP CO., LIMITED
Registrar IANA ID: 3765

There is no end to phishing from Pancakeswap, maybe DEX users are increasing so that this is a target for fraudsters in making phishing so this is always spread where there is a crowd in social so keep an eye on the URL because that is the most important thing.

[$crypto$]

Shiba Fake Giveaway

Website:

Code:

https://shiba-bonuses.com/

The old site is no longer active and they replaced it with a new domain but the script is the same.

Website:

Code:

https://shiba-rewards.com/shiba/

Archived: https://archive.ph/wip/XYtEZ

Domain Name: shiba-rewards.com
Registry Domain ID: 497285
Registrar WHOIS Server: whois.ownregistrar.com
Registrar URL: http://www.ownregistrar.com
Updated Date: 2021-11-01T18:30:00+00:00
        2021-11-01
Creation Date: 2021-11-01T18:30:00+00:00
        2021-11-01
Registrar Registration Expiration Date: 2022-11-01T18:30:00+00:00
        2022-11-01
Registrar: OwnRegistrar, Inc.
Sponsoring Registrar IANA ID: 1250

Shiba is still a surefire trick maybe for scammers by making double bonuses so that many are deceived but I think this should be more aware of double bonuses, I say this is all just a trick.

Avoid

[$crypto$]

Shiba Fake Giveaway

Website:

Code:

https://shiba-bonuses.com/

Website:

Code:

https://shiba-rewards.com/shiba/

Code:

https://shiba-activities.com/

Archived: https://archive.ph/wip/m5CYX

Domain name: shiba-activities.com
Registry Domain ID: 2652498333_DOMAIN_COM-VRSN
Registrar WHOIS Server: whois.namecheap.com
Registrar URL: http://www.namecheap.com
Updated Date: 0001-01-01T00:00:00.00Z
Creation Date: 2021-11-04T09:13:54.00Z
Registrar Registration Expiration Date: 2022-11-04T09:13:54.00Z
Registrar: NAMECHEAP INC
Registrar IANA ID: 1068

Telegram Fake: https://t.me/shibaofficialoop

It's a fake telegram promoting Shiba tokens with high profits, if you are in this group report it and leave, that's better and they will keep searching with lots of people to input.

By reporting the possibility of the telegram can be deleted.


Shibaswap Phishing Site

Website:

Code:

https://shibaswap.is/

Archived: https://archive.ph/sCSbh

Creation Date: 2021-11-05T00:00:00 2021-11-05
Registrar Registration Expiration Date: 2022-11-05T00:00:00

FAKE: https://www.facebook.com/379009102278152/posts/1973196616192718/

It's very dangerous if you click on "restore data" on network metamask because this is a trap and there is no way to try anything to recover your metamask data.

And pay more attention to the original Shibswap.

Original: https://app-shibaswap.io/?

[moderator's note: consecutive posts merged]

[$crypto$]

Pancake.wales Phishing Site

Website:

Code:

https://pancake.wales/

Archived: https://archive.ph/wip/fuPTn

4 days old
Created on 2021-12-09
Expires on 2022-12-09
Updated on 2021-12-09

FAKE: https://www.facebook.com/permalink.php?story_fbid=133210885794854&id=100592572390019

Phishing sites will never go away, this is definitely a must to raise awareness of being trapped on phishing sites.

[$crypto$]

$TWT Fake Giveaway

Website:

Code:

https://community.trustvvallets.org/m/?2022-happy-new-year-giveaway

FAKE: https://www.facebook.com/110820368055696/posts/128393832965016/

Well this is a fake giveaway that is widely spread on social media, maybe it's not just Facebook, scamers spread it, I don't think this is a year-end giveaway but a phishing that asks your Phrasa/Seed to be more careful because every fake offer is always promising.

Stay unaffected.

[$crypto$]

Trust Wallet Giveaway Fake

Website:

Code:

https://trustwallet.claims/

Archived: https://archive.ph/LNBTs

53 days old
Created on 2021-10-26
Expires on 2022-10-26
Updated on 2021-11-29

FAKE: https://www.facebook.com/107205375162786/posts/107372245146099/

Don't directly connect to Metamask in fear that your wallet will be infiltrated, therefore the fraudsters always have the same way and never get tired, so I remind you that trust wallet does not hold any giveaway.

[$crypto$]

Terra Fake Giveaway

Website:

Code:

https://terra-event.live/

Archived: https://archive.ph/TpPym

2 days old
Created on 2022-01-27
Expires on 2023-01-27
Updated on 2022-01-27

Anyone who enters this fake Terra telegram channel please leave and never be tempted by fake giveaways.

Official site: https://www.terra.money/

[$crypto$]

THE SANDBOX Fake Giveaway

Website:

Code:

https://wwv-sandbox-game.github.io/en/?fbclid=IwAR0_1pFTI5QbsykIpXLOAcLjHeaeVBNOQJzJ8z-qAgMeg_5K3EoG7W_OIn4

Archived: https://archive.ph/wip/AssIw







Never enter your Phrases/Seeds in this fake Giveaway



FAKE: https://www.facebook.com/105469948721047/posts/105478518720190/

They promote in the Facebook page and avoid any kind of offer that is not clear because this is a trap to ask for your phrase.

Be careful.

[$crypto$]

Shiba INU airdrop is a fake that inserts a virus wallet if you download it.

Website:

Code:

https://shibasupport.com/

Archived: https://archive.ph/wip/Sojap

6 days old
Created on 2022-02-02
Expires on 2023-02-02
Updated on 2022-02-02

This is a fake airdrop that offers you via email (I got the email notification) so be careful not to click or download the recommended application and it's clear there has been infiltrated by a Malware Trojan virus that I saw checked on virustotal.

Shiba INU never offers any airdrops, so be careful and pay attention again that this is a scam attempt via vrius if you download it.

[pakpahan]

<....>

thank you for posting this scam giveaway site here, I also got an email about this scam project, the scammers are already using meme coins to trick other people