[List] Phishing Cryptocurrency Site

[Baofeng]

Criminals are still in the trail of Elon Musk face and name:

Code:

https://elonmuskxpro.com/

Archived: https://archive.is/K9BJ8

Registrant    WhoisGuard Protected
Registrant Org    WhoisGuard, Inc.
Registrant Country    pa
Registrar    NAMECHEAP INC NameCheap, Inc.
IANA ID: 1068
URL: http://www.namecheap.com
Whois Server: whois.namecheap.com

(p)
Registrar Status    addPeriod, clientTransferProhibited
Dates    8 days old
Created on 2020-11-01
Expires on 2021-11-01
Updated on 0000-12-31    
  
Name Servers    DNS1.REGISTRAR-SERVERS.COM (has 6,725,888 domains)
DNS2.REGISTRAR-SERVERS.COM (has 6,725,888 domains)
   
  
Tech Contact    WhoisGuard Protected
WhoisGuard, Inc.
P.O. Box 0823-03411,
Panama, Panama, pa

(p) (f)
IP Address    95.181.152.79 - 1 other site is hosted on this server

[1714594570]

1714594570

[1714594570]

1714594570

[1714594570]

1714594570

[Chikito]

Fake UNI Airdrop

Code:

http://uni-airdrop.org/

the relation IP https://www.virustotal.com/gui/ip-address/199.188.206.67/relations

Code:

www.bit2x.uno
https://www.cryptoline.uno/

Fake and phishing, doubled your Bitcoin.



Be aware!. Please help me to report.

[Baofeng]

Another one of the Elon Musk face.

Code:

https://musk-giving.com/

Archived: https://archive.is/p8plD

Registrant    Domain Administrator
Registrant Org    See PrivacyGuardian.org
Registrant Country    us
Registrar    NameSilo, LLC
IANA ID: 1479
URL: https://www.namesilo.com/,http://www.namesilo.com
Whois Server: whois.namesilo.com

(p)
Registrar Status    clientTransferProhibited
Dates    3 days old
Created on 2020-11-14
Expires on 2021-11-14
Updated on 2020-11-14    
  
Name Servers    DNS1.P05.NSONE.NET (has 2,206,178 domains)
DNS2.P05.NSONE.NET (has 2,206,178 domains)
DNS3.P05.NSONE.NET (has 2,206,178 domains)
DNS4.P05.NSONE.NET (has 2,206,178 domains)
   
  
Tech Contact    Domain Administrator
See PrivacyGuardian.org
1928 E. Highland Ave. Ste F104 PMB# 255,
Phoenix, AZ, 85016, us

(p)
IP Address    165.227.12.111 - 19,338 other sites hosted on this server

[Baofeng]

Here's one in Youtube:

Code:

https://www.youtube.com/watch?v=w-5Ojc6YPl8

Website:

Code:

https://telegra.ph/Tesla-5000-BTC-Giveaway-Airdrop-12-01

Archive: https://archive.is/SAHr6

[Chikito]

Fake coingecko.pro exchange

Code:

https://coingecko.pro/

IP Address: 104.27.144.172
Domain Name: COINGECKO.PRO
Registry Domain ID: D503300001190052418-LRMS
Registrar WHOIS Server: whois.namesilo.com
Registrar URL: http://www.namesilo.com
Updated Date: 2020-11-21T16:44:17Z
Creation Date: 2020-11-20T22:44:02Z
Registry Expiry Date: 2021-11-20T22:44:02Z
Registrar Registration Expiration Date:
Registrar: Namesilo, LLC
Registrar IANA ID: 1479
Registrar Abuse Contact Email: afilias-abuse@namesilo.com

Be careful guys, coingecko isn't exchange your Bitcoin.

[Chikito]

Fake Binance Airdrop

Code:

https://bindrop.co/

IP Address: 104.18.33.219
Domain Name: bindrop.co
Registry Domain ID: DFC813AE066C44C3FAA917965A22AB098-NSR
Registrar WHOIS Server: whois.publicdomainregistry.com
Registrar URL: publicdomainregistry.com
Updated Date: 2020-12-17T21:00:39Z
Creation Date: 2020-12-17T20:07:06Z
Registry Expiry Date: 2021-12-17T20:07:06Z
Registrar: PDR Ltd. d/b/a PublicDomainRegistry.com
Registrar IANA ID: 303
Registrar Abuse Contact Email: abuse@publicdomainregistry.com

be aware, binance never airdrop bitcoin, don't send your btc to a phishing website.

[Chikito]

Again, Fake/Phishing Uniswap

Code:

http://www.uniswap-support.uniswap-company.com
http://uniswap-support.com

IP Address: 207.174.213.52
Domain Name: UNISWAP-SUPPORT.COM
Registry Domain ID: 2580021293_DOMAIN_COM-VRSN
Registrar WHOIS Server: whois.registrar.eu
Registrar URL: http://www.openprovider.com
Updated Date: 2020-12-21T17:58:25Z
Creation Date: 2020-12-21T17:53:22Z
Registry Expiry Date: 2021-12-21T17:53:22Z
Registrar: Hosting Concepts B.V. d/b/a Registrar.eu
Registrar IANA ID: 1647
Registrar Abuse Contact Email: abuse@registrar.eu

Ip Relationship https://www.virustotal.com/gui/ip-address/207.174.213.52/relations

Date resolved
Domain
2020-12-22
uniswap-support.com
2020-12-22
cpcontacts.uniswap-support.com
2020-12-22
webmail.uniswap-support.com
2020-12-22
cpcalendars.uniswap-support.com
2020-12-22
www.uniswap-support.com
2020-12-22
uniswap-support.uniswap-company.com
2020-12-22
cpanel.uniswap-support.com
2020-12-22
mail.uniswap-support.com
2020-12-22
www.uniswap-support.uniswap-company.com
2020-12-22
autodiscover.uniswap-support.com
2020-12-22
webdisk.uniswap-support.com
2020-12-16
cpcontacts.uniswap-company.com
2020-12-16
webmail.uniswap-company.com
2020-12-16
webdisk.uniswap-company.com
2020-12-16
mail.uniswap-company.com
2020-12-16
autodiscover.uniswap-company.com
2020-12-16
www.uniswap-company.com
2020-12-16
cpcalendars.uniswap-company.com

Be careful as usual.

[Chikito]

Fake Mycelium wallet on Android

https://play.google.com/store/apps/details?id=com.mycelium.pro



be aware, already 500+ installed, I hope they aren't lost Bitcoin.

[Baofeng]

Another one of the Elon Musk fake giveaway:

Website:

Code:

https://epaymentbtc.tumblr.com/
https://epaymenteth.tumblr.com/
https://christmasbit.tumblr.com/

Archived: https://archive.is/1BM88

Criminals uses tumblr now, if someone will help me report, it will be taken down very quickly.

[Chikito]

Phishing Paxful Exchange

Code:

http://pioxul.com

IP Address: 162.0.215.125
Domain Name: PIOXUL.COM
Registry Domain ID: 2580599991_DOMAIN_COM-VRSN
Registrar WHOIS Server: whois.namecheap.com
Registrar URL: http://www.namecheap.com
Updated Date: 2020-12-24T12:28:37Z
Creation Date: 2020-12-24T12:28:27Z
Registry Expiry Date: 2021-12-24T12:28:27Z
Registrar: NameCheap, Inc.
Registrar IANA ID: 1068
Registrar Abuse Contact Email: abuse@namecheap.com

Be aware, don't use google searching. the correct website is paxful.com. please reporting also into https://safebrowsing.google.com/safebrowsing/report_phish/?hl=en and Namecheap domain.

[Baofeng]

Another of Elon Musk Fake Giveaway:

Code:

https://elon-crypto.fund/

Archived: https://archive.is/YD5vs

Whois Record for Elon-Crypto.fund
How does this work?
Domain Profile
Registrant    REDACTED FOR PRIVACY
Registrant Org    WhoisGuard, Inc.
Registrant Country    pa
Registrar    NameCheap, Inc.
IANA ID: 1068
URL: https://www.namecheap.com/
Whois Server: whois.namecheap.com

(p)
Registrar Status    clientTransferProhibited
Dates    33 days old
Created on 2020-11-29
Expires on 2021-11-29
Updated on 2020-12-04    
 
Name Servers    AGUSTIN.NS.CLOUDFLARE.COM (has 17,893,112 domains)
LAILA.NS.CLOUDFLARE.COM (has 17,893,112 domains)
   
 
Tech Contact    REDACTED FOR PRIVACY
REDACTED FOR PRIVACY,
REDACTED FOR PRIVACY, REDACTED FOR PRIVACY, REDACTED FOR PRIVACY, REDACTED FOR PRIVACY
(p) (f)
IP Address    104.27.146.61 - 482 other sites hosted on this server

[Chikito]

Fake and Phishing 1inch.cc

Code:

http://1inch.cc/

the related IP address: https://www.virustotal.com/gui/ip-address/103.253.140.164/relations

here all fake using IP address:

IP Address: 103.253.140.164
Domain Name: 1INCH.CC
Registry Domain ID: 153469856_DOMAIN_CC-VRSN
Registrar WHOIS Server: whois.namesilo.com
Registrar URL: http://www.namesilo.com
Updated Date: 2020-12-29T00:47:50Z
Creation Date: 2020-12-29T00:46:50Z
Registry Expiry Date: 2021-12-29T00:46:50Z
Registrar: NameSilo, LLC
Registrar IANA ID: 1479

Be careful everyone!.

[Chikito]

Fake Uniswap (uinswop)

Code:

https://app.uinswop.org/#/swap

IP Address: 47.91.72.87
created: 2019-01-07T10:48:20Z
last-modified: 2019-01-07T10:48:20Z
etname: NON-RIPE-NCC-MANAGED-ADDRESS-BLOCK
descr: IPv4 address block not managed by the RIPE NCC

Be careful, don't searching uniswap on google box.

[Baofeng]

Ah, the scammers are still having Elon face on their mouth, hehehe

Code:

https://elon-free.fund/

Archive: https://archive.is/V2Wko

Whois Record for Elon-Free.fund
How does this work?
Domain Profile
IP Address    172.64.80.222 - 8 other sites hosted on this server
   
  
IP Location    United States Of America - California - San Francisco - Cloudflare Inc.
ASN    United States Of America AS13335 CLOUDFLARENET, US (registered Jul 14, 2010)
IP History    1 change on 1 unique IP addresses over 0 years    
  
Hosting History    1 change on 2 unique name servers over 0 year

[Chikito]

Fake walletconnect.org

Code:

www.wallétconnect.org/
Wallelconnect.org

when you click Metamask wallet, will direct you to insert a private key and mnemonic phrase into a website where this will trap you to lose your balance.

IP Address: 198.54.115.177
Domain Name: WALLELCONNECT.ORG
Registry Domain ID: D402200000015707341-LROR
Registrar WHOIS Server: whois.namecheap.com
Registrar URL: http://www.namecheap.com
Updated Date: 2021-01-13T19:40:02Z
Creation Date: 2021-01-13T19:39:48Z
Registry Expiry Date: 2022-01-13T19:39:48Z
Registrar Registration Expiration Date:
Registrar: NameCheap, Inc.

Please help me to report this fake into https://safebrowsing.google.com/safebrowsing/report_phish/?hl=en and also the namecheap company.

[Baofeng]

Added one of the list:

Code:

https://givemusk.space/

Archived: https://archive.is/NJgIH

Whois Record for GiveMusk.space

Registrant Country    ua
Registrar    PDR Ltd. d/b/a PublicDomainRegistry.com
IANA ID: 303
URL: https://publicdomainregistry.com
Whois Server: whois.PublicDomainRegistry.com

(p)
Registrar Status    addPeriod, clientTransferProhibited, serverTransferProhibited
Dates    4 days old
Created on 2021-01-14
Expires on 2022-01-14
Updated on 2021-01-14    
 
Name Servers    IGOR.NS.CLOUDFLARE.COM (has 17,823,023 domains)
NOVA.NS.CLOUDFLARE.COM (has 17,823,023 domains)
   
 
Tech Contact    —
IP Address    172.67.194.18 - 4 other sites hosted on this server

[$crypto$]

List of Fake Giveaways added.

Surprisingly I was added to the fake giveaway group and there were lots of people getting it. I'm sure it was a bot that the owner had planned.

Keep careful guys because various scamers have now been done.

Website:

Code:

https://uni2021.com/

Archived: https://archive.is/iC7jG

Domain Name: UNI2021.COM
Registry Domain ID: 2581870611_DOMAIN_COM-VRSN
Registrar WHOIS Server: whois.tucows.com
Registrar URL: http://tucowsdomains.com
Updated Date: 2020-12-31T18:37:10
Creation Date: 2020-12-31T18:22:43
Registrar Registration Expiration Date: 2021-12-31T18:22:43
Registrar: TUCOWS, INC.
Registrar IANA ID: 69

[Baofeng]

Gemini fake 5000 BTC Giveaway

Code:

https://airdrop-gemini.blogspot.com/

Archived: https://archive.is/hQZwM

They are using blogspot platform to create this fake giveaway, so be very careful.

[Chikito]

Fake Exodus wallet

Code:

https://exodus-wallet.net

IP Address: 5.252.177.28
Domain Name: EXODUS-WALLET.NET
Registry Domain ID: 2586397948_DOMAIN_NET-VRSN
Registrar WHOIS Server: whois.PublicDomainRegistry.com
Registrar URL: http://www.publicdomainregistry.com
Updated Date: 2021-01-22T16:29:33Z
Creation Date: 2021-01-22T15:50:27Z
Registry Expiry Date: 2022-01-22T15:50:27Z
Registrar: PDR Ltd. d/b/a PublicDomainRegistry.com
Registrar IANA ID: 303

be careful, I fund this on google searching. Don't search exodus on the search box, always put the exact URL into the box https://www.exodus.io/

[Chikito]

Be Aware Phishing Bestchange (bestchainge.club)

Code:

https://bestchainge.club/

IP Address: 8.208.95.37
Domain Name: bestchainge.club
Registry Domain ID: D02C5C92724764F4BB77C25B75041590D-NSR
Registrar WHOIS Server: whois.namecheap.com
Registrar URL: http://www.namecheap.com
Updated Date: 2021-01-24T20:19:12Z
Creation Date: 2021-01-24T20:17:58Z
Registry Expiry Date: 2022-01-24T20:17:58Z
Registrar: NameCheap, Inc.
Registrar IANA ID: 1068
Registrar Abuse Contact Email: abuse@namecheap.com
Registrar Abuse Contact Phone: +1.6613102107

the IP relationship; https://www.virustotal.com/gui/ip-address/8.208.95.37/relations



be careful, always double-check the website url before actions.