[List] Phishing Cryptocurrency Site

[$crypto$]

Guys fake Binance guys are back with a new domain name I think they will keep appearing incessantly I always find this picture on the channel on telegram ,,, oh my god when will they stop,

Medium Website; https://supportbnb.com/
Archived; https://archive.is/GKRIj

Domain Name: SUPPORTBNB.COM
Registry Domain ID: 2555885605_DOMAIN_COM-VRSN
Registrar WHOIS Server: whois.tucows.com
Registrar URL: http://tucowsdomains.com
Updated Date: 2020-08-27T09:24:07
Creation Date: 2020-08-27T09:22:19
Registrar Registration Expiration Date: 2021-08-27T09:22:19
Registrar: TUCOWS, INC.
Registrar IANA ID: 69
Domain Status: clientTransferProhibited https://icann.org/epp#clientTransferProhibited
Domain Status: clientUpdateProhibited https://icann.org/epp#clientUpdateProhibited
Registry Registrant ID:

[$crypto$]

I again found a new domain about a fake giveaway from Binance whose site is similar to Medium, I will continue to post here if I find a new domain.

Medium Website: https://bin-crypto.com/
Archived: https://archive.is/wbmt7

Domain Name: BIN-CRYPTO.COM
Registry Domain ID: 2557250329_DOMAIN_COM-VRSN
Registrar WHOIS Server: whois.tucows.com
Registrar URL: http://tucowsdomains.com
Updated Date: 2020-09-02T16:56:38
Creation Date: 2020-09-02T14:11:09
Registrar Registration Expiration Date: 2021-09-02T14:11:09
Registrar: TUCOWS, INC.
Registrar IANA ID: 69
Domain Status: clientTransferProhibited https://icann.org/epp#clientTransferProhibited
Domain Status: clientUpdateProhibited https://icann.org/epp#clientUpdateProhibited
Registry Registrant ID:

[OmegaStarScream]

I found two new phishing sites on /r/ExodusWallet:

#1:

Code:

Domain Name: exiodus.com
Registry Domain ID: 2552253759_DOMAIN_COM-VRSN
Registrar WHOIS Server: whois.registrar.eu
Registrar URL: http://www.registrar.eu
Updated Date: 2020-08-11T13:15:15Z
Creation Date: 2020-08-11T10:58:08Z
Registrar Registration Expiration Date: 2021-08-11T10:58:08Z
Registrar: Hosting Concepts B.V. d/b/a Openprovider

#2:

Code:

Domain Name: exoduz.io
Registry Domain ID: D503300001186353593-LRMS
Registrar WHOIS Server: 
Registrar URL: http://www.ascio.com
Updated Date: 2020-08-30T20:51:42+00:00 2020-08-30
Creation Date: 2020-08-30T16:30:47+00:00 2020-08-30
Registrar Registration Expiration Date: 2021-08-30T16:30:47+00:00 2021-08-30
Registrar: Ascio Technologies, Inc. Danmark - Filial af Ascio technologies, Inc. USA

Both sites are showing in Google ads. Be careful.

[$crypto$]

A new domain is back I will never be bored to keep exposing it here so everyone knows that in every new domain it remains the same in purpose.

Oh my God I always find this on telegram with lots of photo posts in crypto groups.

Stay alert

Medium Website; https://binancefound.com/
Archived; https://archive.is/9MY5M

Domain Name: BINANCEFOUND.COM
Registry Domain ID: 2557660999_DOMAIN_COM-VRSN
Registrar WHOIS Server: whois.publicdomainregistry.com
Registrar URL: www.publicdomainregistry.com
Updated Date: 2020-09-04T12:36:36Z
Creation Date: 2020-09-04T11:14:05Z
Registrar Registration Expiration Date: 2021-09-04T11:14:05Z
Registrar: PDR Ltd. d/b/a PublicDomainRegistry.com
Registrar IANA ID: 303

[Baofeng]

Ethereum fake airdrop, this time no image of Vitalik but still the same modus.

Code:

 http://drop-eth.org/

Registrant Org   Private Person
Registrant Country   ru
Registrar   Registrar of Domain Names REG.RU LLC
IANA ID: 1606
URL: http://www.reg.com
Whois Server: whois.reg.com

(p)
Registrar Status   clientTransferProhibited, serverTransferProhibited
Dates   43 days old
Created on 2020-07-27
Expires on 2021-07-27
Updated on 2020-07-27

https://whois.domaintools.com/drop-eth.org

[Chikito]

Phishing Attempts

Code:

https://bledner.io/

Domain Name: bledner.io
IP Address: 198.54.116.37
Registrar WHOIS Server: whois.namecheap.com
Registrar URL: www.namecheap.com
Updated Date: 2020-07-21T20:24:34Z
Creation Date: 2020-07-21T20:22:34Z
Registrant State/Province: Panama
Registrant Country: PA

bledner.io ≠ blender.io

Original thread > https://bitcointalk.org/index.php?topic=5052876.0

[Chikito]

Fake ripple airdrop

Code:

https://ripplelab.in/
https://x2ripple.com
https://ripple-events.info

https://www.virustotal.com/gui/ip-address/31.170.161.89/relations

https://www.virustotal.com/gui/ip-address/104.18.39.39/relations

Domain Name: X2RIPPLE.COM
Registry Domain ID: 2559500620_DOMAIN_COM-VRSN
Registrar WHOIS Server: whois.namecheap.com
Registrar URL: http://www.namecheap.com
Updated Date: 2020-09-13T15:52:30Z
Creation Date: 2020-09-13T15:34:57Z

[Chikito]

Fake uniswap

Code:

https://uniswapv.com/

IP Address: 160.124.156.102

Domain Name: UNISWAPV.COM
Registry Domain ID: 2561189594_DOMAIN_COM-VRSN
Registrar WHOIS Server: whois.wildwestdomains.com
Registrar URL: http://www.wildwestdomains.com
Updated Date: 2020-09-22T02:43:35Z
Creation Date: 2020-09-22T02:43:35Z

https://www.virustotal.com/gui/ip-address/160.124.156.102/relations

Look at relation IP had a lot of fake website



Be careful!

[Chikito]

Fake Uniswap.ug

Code:

https://uniswap.ug/

All relation fake crypto website https://www.virustotal.com/gui/ip-address/176.113.115.216/relations

Domain Name: uniswap.ug
IP Address: 176.113.115.216
Top Level Domain: UG (Uganda)
Domain Name: uniswap.ug
c/o registry.co.ug
Registrar URL: https://registry.co.ug
Address: 560 Neal Road
North Katie, FL 07395
Registrar: UG Registrar
Registrant Organization: Cooper-Lawrence
Registrant State/Province: 696 Garrett Tunnel
Rebeccaside, UT 05764

More similar

Code:

https://www.boostuni.com/

Fake bitcoin give away

Code:

https://socialbtc.org/

IP Address: 104.28.24.210
Domain Name: socialbtc.org
Top Level Domain: ORG (Organization)
Domain Name: SOCIALBTC.ORG
Registry Domain ID: D402200000014818886-LROR
Registrar WHOIS Server: whois.reg.com
Registrar URL: http://www.reg.com
Updated Date: 2020-10-04T09:42:30Z
Creation Date: 2020-10-04T09:41:24Z

[Chikito]

Fake and Phishing

Code:

https://coin-ex.ru/

IP Address: 185.178.208.155
created: 2020-02-01T20:57:10Z
paid-till: 2021-02-01T20:57:10Z
free-date: 2021-03-04

also direct link into fake site;

Code:

https://besetchange.ru

archived

[Chikito]

Fake Free Give away UNI

Code:

https://www.uni-fund.info/
https://unireward.org/

IP Address: 91.189.114.29
Domain Name: UNIREWARD.ORG
Registry Domain ID: D402200000014861830-LROR
Registrar WHOIS Server: https://www.nic.ru/whois
Registrar URL: https://www.nic.ru/whois
Updated Date: 2020-10-09T08:42:38Z
Creation Date: 2020-10-09T08:42:35Z
Registry Expiry Date: 2021-10-09T08:42:35Z

Fake Swap

Fake governance proposal UNI, don't connect your wallet into this scam site.

Code:

https://unii.finance

IP Address: 44.239.19.102
Domain Name: unii.finance
Registry Domain ID: 219d0ba149204e1aa693f80b96878f85-DONUTS
Registrar WHOIS Server: whois.gandi.net
Registrar URL: https://www.gandi.net
Updated Date: 2020-09-23T19:49:46Z
Creation Date: 2020-09-18T19:48:57Z
Registry Expiry Date: 2021-09-18T19:48:57Z

Be careful

[Chikito]

Phishing Binance website

Code:

https://www.binancezh.com

Code:

https://accounts.binancezh.com/en/login

https://www.virustotal.com/gui/ip-address/76.223.2.151/relations

IP Address: 13.248.150.68
Domain Name: BINANCEZH.COM
Registry Domain ID: 2432105214_DOMAIN_COM-VRSN
Registrar WHOIS Server: grs-whois.hichina.com
Registrar URL: http://www.net.cn
Updated Date: 2020-05-01T01:40:02Z
Creation Date: 2019-09-11T09:07:11Z
Registry Expiry Date: 2022-09-11T09:07:11Z
Registrar: Alibaba Cloud Computing (Beijing) Co., Ltd.

Fake/Phishing Uniswap website

Code:

https://uniswapz.org/#/

IP relationship https://www.virustotal.com/gui/ip-address/199.188.206.67/relations



Let's look similar uniswap.org domain https://dnstwister.report/search?ed=756e69737761702e6f7267

Over identified 200+ domains similar to uniswap.org.

Be careful. Don't input your mnemonic seed!.

[Chikito]

Again, phishing UNISWAP

Code:

https://uniswcp.org
https://www.uniswapex.org/
https://uiniswapv2.com/

Domain Name: UNISWCP.ORG
Registry Domain ID: D402200000014878925-LROR
Registrar WHOIS Server: whois.namecheap.com
Registrar URL: http://www.namecheap.com
Updated Date:
Creation Date: 2020-10-11T13:56:19Z
Registry Expiry Date: 2021-10-11T13:56:19Z
Registrar Registration Expiration Date:
Registrar: NameCheap, Inc.

Phishing JustSwap

Code:

https://justswapv2.com/

Domain Name: JUSTSWAPV2.COM
Registry Domain ID: 2562123388_DOMAIN_COM-VRSN
Registrar WHOIS Server: whois.namecheap.com
Registrar URL: http://www.namecheap.com
Updated Date: 2020-10-06T20:30:16Z
Creation Date: 2020-09-25T22:58:18Z
Registry Expiry Date: 2021-09-25T22:58:18Z
Registrar: NameCheap, Inc.

Most everyday scammer try create the new phishing popular domain for scamming people, so be careful as always.

[Chikito]

Phishing give away

Code:

https://uni-drop.com/

IP Address: 172.67.148.245
Domain Name: UNI-DROP.COM
Registry Domain ID: 2566549887_DOMAIN_COM-VRSN
Registrar WHOIS Server: whois.namecheap.com
Registrar URL: http://www.namecheap.com
Updated Date: 2020-10-17T20:28:37Z
Creation Date: 2020-10-17T20:26:57Z
Registry Expiry Date: 2021-10-17T20:26:57Z
Registrar: NameCheap, Inc.
Registrar IANA ID: 1068
Registrar Abuse Contact Email: abuse@namecheap.com

Scammer address: https://etherscan.io/address/0xFEE8BeE7Bcf1dCDb452807380F096DD7baD838A8#tokentxns

[$crypto$]

What happened: Ethereum Fake Giveaway

Code:

https://ethereum.llc/
https://web.archive.org/web/20201019032623/https://ethereum.llc/

Domain Name: ETHEREUM.LLC
Registry Domain ID: D503300001187475244-LRMS
Registrar WHOIS Server: whois.namecheap.com
Registrar URL: www.namecheap.com
Updated Date: 2020-10-14T00:08:37Z
Creation Date: 2020-10-13T23:23:02Z
Registry Expiry Date: 2021-10-13T23:23:02Z
Registrar Registration Expiration Date:
Registrar: NameCheap, Inc
Registrar IANA ID: 1068

Addres Scammer: https://etherscan.io/address/0x525A963eda51FB3A36730B3C3214946c6A137f55

Edit;

In the wallet address there is already 1 Ether I do not know if this is the victim or their trick to install so many send but I noticed this is not sent except for himself.

[Chikito]

Phishing Uniswap

Code:

https://app.uniswap.ws

Don't insert a mnemonic phrase there!

IP Address: 190.97.166.32

Reverse DNS: host-190-97-166-32.ccipanama.com

Domain Name: app.uniswap.ws

Top Level Domain: WS (Samoa)

The relation IP https://www.virustotal.com/gui/ip-address/190.97.166.32/relations

[Chikito]

Phishing and clone chipmixer dot onion

here the link.

Code:

http://chipmixqo7rmzyfm.onion/
http://chipmixdi3tqpx6p.onion/
http://chipmixenixr6ueq.onion/
http://dslvz6u2utvaylzg.onion/

All the links still alive.

[Baofeng]

They are back with Elon Musk face again:

Website:

Code:

https://musk-coins.com/

Archived: https://archive.is/5HUk2

Registrar    NameSilo, LLC
IANA ID: 1479
URL: https://www.namesilo.com/,http://www.namesilo.com
Whois Server: whois.namesilo.com

(p)
Registrar Status    clientTransferProhibited
Dates    19 days old
Created on 2020-10-16
Expires on 2021-10-16
Updated on 2020-11-02    
  
Name Servers    DNS1.P03.NSONE.NET (has 2,191,036 domains)
DNS2.P03.NSONE.NET (has 2,191,036 domains)
DNS3.P03.NSONE.NET (has 2,191,036 domains)
DNS4.P03.NSONE.NET (has 2,191,036 domains)
   
  
Tech Contact    Domain Administrator
See PrivacyGuardian.org
1928 E. Highland Ave. Ste F104 PMB# 255,
Phoenix, AZ, 85016, us

(p)
IP Address    167.172.215.127 - 12,568 other sites hosted on this server
   
  
IP Location    United States Of America - California - Santa Clara - Digitalocean Llc

[Chikito]

Phishing Uniswap

Code:

https://uniswap.eth.link/

The relation Ip address https://www.virustotal.com/gui/ip-address/35.241.8.114/relations

Code:

http://reality.eth.link/app/
http://pria.eth.link/

Domain Name: uniswap.eth.link
IP Address: 35.241.8.114
Domain Name: eth.link
Registry Domain ID: DO_520b95f2ed11344985fb3673d77ee786-UR
Registrar WHOIS Server: whois.uniregistrar.com
Registrar URL: uniregistrar.com
Updated Date: 2020-09-09T19:33:09.937Z
Creation Date: 2017-07-26T19:31:41.508Z
Registry Expiry Date: 2021-07-26T19:31:41.508Z

Already reported that IP here https://www.abuseipdb.com/
https://www.abuseipdb.com/check/35.241.8.114

[Baofeng]

More of Elon Musk face here:

Code:

https://money-tesla.com/

Archived: https://archive.is/ZUdT6

Registrant    Domain Administrator
Registrant Org    See PrivacyGuardian.org
Registrant Country    us
Registrar    NameSilo, LLC
IANA ID: 1479
URL: https://www.namesilo.com/,http://www.namesilo.com
Whois Server: whois.namesilo.com

(p)
Registrar Status    clientTransferProhibited
Dates    5 days old
Created on 2020-11-03
Expires on 2021-11-04
Updated on 2020-11-04    
 
Name Servers    DNS1.P08.NSONE.NET (has 2,195,035 domains)
DNS2.P08.NSONE.NET (has 2,195,035 domains)
DNS3.P08.NSONE.NET (has 2,195,035 domains)
DNS4.P08.NSONE.NET (has 2,195,035 domains)
   
 
Tech Contact    Domain Administrator
See PrivacyGuardian.org
1928 E. Highland Ave. Ste F104 PMB# 255,
Phoenix, AZ, 85016, us

(p)
IP Address    165.227.0.164 - 24,478 other sites hosted on this server